Add authentication logic

[jGleitz]

Branch: HelfenKannJeder/come2help-web: feature/authentication-logic

TODOs

• Installation
• Setup
• Get clientId for Facebook, Google Plus, Instagram, etc. (optional. Does @valentinz have specific accounts? HowTo)
• Add resolve to routes (RouteProvider doc, Example)
  • skipIfLoggedIn
  • loginRequired
• Create login form (Example)
  • Controller
  • Partial
• Send POST request on login form submit satellizer does that already
• Receive JSON Web Token and save it to local storage
• Coordinate with backend regarding configuration of login with Email and Password (see below)
• Logout Controller

Default configuration of satellizer for login with Email and Password

$authProvider.httpInterceptor = function() { return true; },
$authProvider.withCredentials = true;
$authProvider.tokenRoot = null;
$authProvider.cordova = false;
$authProvider.baseUrl = '/';
$authProvider.loginUrl = '/auth/login';
$authProvider.signupUrl = '/auth/signup';
$authProvider.unlinkUrl = '/auth/unlink/';
$authProvider.tokenName = 'token';
$authProvider.tokenPrefix = 'satellizer';
$authProvider.authHeader = 'Authorization';
$authProvider.authToken = 'Bearer';
$authProvider.storageType = 'localStorage';

[BassT]

The login data is submitted in plain text. Is that a problem?

{"email":"[email protected]","password":"asdasd"}

[jGleitz]

The login data is submitted in plain text. Is that a problem?

We’re using SSL, so I guess not. I thought about it and I’m pretty sure not security gain can be achieved by hashing the password on the client side.

Plus, if that puts your mind at ease, Facebook submits passwords in plain text too ;)