Skip to content

The API should provide security mechanisms #2

Description

@wasadigi

At the moment, the server is entirely open: any sensor can report any measure, any client can retrieve all emotions. We need some form of identification mechanism (something like an organization, a project or a user). We need authentication (probably with some sort of token). Finally, we must define the authorization model (who can retrieve emotions from an organization?).

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions