JWT Auth

[SrMouraSilva]

• Create /v1/auth for login (get jwt token)
• Docs /v1/auth
• Fix /v1/ws to client informs at the initial connection the token data
• Think about the WebSocket Token and the login (change the token will be drops the websocket token based connection?)
• Auth the handlers
• Not requires auth from WebService Socket?
• User with a random password for others components

Docs and auth: Update all docs api Header

• Authentication
• Plugins Management
• Banks Management
• Bank Management
• Pedalboard Management
• Pedalboard Data Management
• Effect Management
• Param Management
• Effect connection Management
• Current Management
• Move
• Configurations
• Component Data
• WebSocket

curl -H 'Authorization:bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJleHAiOjE1MjEwNzYxOTh9.ZmX3gSjzV-aMzlW77ug0KGnzx7CopKJA7Q2HV7HONOM' http://localhost:3000/v1/current/data

• Cookie based

  • http://www.tornadoweb.org/en/stable/guide/security.html
  • http://guillaumevincent.com/2013/02/12/Basic-authentication-on-Tornado-with-a-decorator.html

• JWT Json Web Token: https://jwt.io/

  • https://github.com/vsouza/JWT-Tornado (see issue)
  • http://www.codekraft.co/python/json-web-token-com-tornado/
    • https://github.com/paulorodriguesxv/tornado-json-web-token-jwt
  • https://steelkiwi.com/blog/jwt-authorization-python-part-1-practise/

[SrMouraSilva]

Zynthian auth (cookie based)

• https://github.com/zynthian/zynthian-webconf/blob/ec09ae3daa43eb462c18c382b7e5794d1551d249/lib/LoginHandler.py
• https://github.com/zynthian/zynthian-webconf/blob/ec09ae3daa43eb462c18c382b7e5794d1551d249/lib/SecurityConfigHandler.py

[SrMouraSilva]

Other material:

• https://github.com/wallisonfelix/CLORepositoryWebPlatform
• https://github.com/wallisonfelix/CLORepositoryWebPlatform/blob/81601d45fbc17be9863ddca9382d1c15f6057731/config/auth/jwt.js