{"action":"opened","issue":{"url":"https://api.github.com/repos/cul-2016/quiz/issues/267","repository_url":"https://api.github.com/repos/cul-2016/quiz","labels_url":"https://api.github.com/repos/cul-2016/quiz/issues/267/labels{/name}","comments_url":"https://api.github.com/repos/cul-2016/quiz/issues/267/comments","events_url":"https://api.github.com/repos/cul-2016/quiz/issues/267/events","html_url":"https://github.com/cul-2016/quiz/issues/267","id":197161820,"number":267,"title":"Server Side Authentication with Cookies","user":{"login":"sohilpandya","id":2305591,"avatar_url":"https://avatars.githubusercontent.com/u/2305591?v=3","gravatar_id":"","url":"https://api.github.com/users/sohilpandya","html_url":"https://github.com/sohilpandya","followers_url":"https://api.github.com/users/sohilpandya/followers","following_url":"https://api.github.com/users/sohilpandya/following{/other_user}","gists_url":"https://api.github.com/users/sohilpandya/gists{/gist_id}","starred_url":"https://api.github.com/users/sohilpandya/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sohilpandya/subscriptions","organizations_url":"https://api.github.com/users/sohilpandya/orgs","repos_url":"https://api.github.com/users/sohilpandya/repos","events_url":"https://api.github.com/users/sohilpandya/events{/privacy}","received_events_url":"https://api.github.com/users/sohilpandya/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-12-22T12:13:18Z","updated_at":"2016-12-22T12:13:18Z","closed_at":null,"body":"We've been discussing the best way to tackle the security issue and having server side authentication, and we're thinking of using [Hapi Auth Cookie](https://github.com/hapijs/hapi-auth-cookie)\r\n\r\n@iteles we wanted to find out if anyone in DWYL has used this particular module or if you'd recommend we use Hapi-auth-JWT instead of the one above, if similar outcomes can be achieved. \r\n\r\n**Things to look out for**\r\n- Back end will have authentication for all routes by default, we can turn of auth for specific endpoints that do not require it. (`auth: false`)\r\n- At the moment the `cul_id`, `cul_is_lecturer` & `cul_is_cookie_accepted` are being used for front end authentication in React, so we will need to alter the flow so that the front end is now looking for the encrypted versions of this, decrypting them and then storing them in the state. \r\n\r\n"}}
{"actor":{"display_login":"sohilpandya"}}