6 Commits

Author	SHA1	Message	Date
Dan Brown	349b4629be	Extracted API auth into guard ... Also implemented more elegant solution to allowing session auth for API routes; A new 'StartSessionIfCookieExists' middleware, which wraps the default 'StartSession' middleware will run for API routes which only sets up the session if a session cookie is found on the request. Also decrypts only the session cookie. Also cleaned some TokenController codeclimate warnings.	2019-12-30 14:51:28 +00:00
Dan Brown	2cfa37399c	Fixed some empty-expiry conditions of token ui flows	2019-12-29 20:18:37 +00:00
Dan Brown	692fc46c7d	Removed token 'client' text, avoid confusion w/ oAuth ... - Instead have a token_id and a secret. - Displayed a 'Token ID' and 'Token Secret'.	2019-12-29 20:07:28 +00:00
Dan Brown	832fbd65af	Added testing coverage to user API token interfaces	2019-12-29 19:46:46 +00:00
Dan Brown	dccb279c84	Built out interfaces & endpoints for API token managment	2019-12-29 17:03:52 +00:00
Dan Brown	d336ba6874	Started work on API token controls ... - Added access-api permission. - Started user profile UI work. - Created database table and model for tokens. - Fixed incorrect templates down migration :(	2019-12-29 13:02:26 +00:00