Findnlink Auth Proxy Server

• DEV: auth-dev.findnlink.com
• PROD: auth.findnlink.com

If a user is logged in he will be remembered for 6 months.

Stuff that needs to be done.

• JWT Token
• JWT refresh token (logging out user automatically after a specific time)
  • silent refresh token
• Google OAuth2
  • check if firstName is safe
  • replace redirect URL
• Sending emails if someone registered
• Sending emails if some forgot their password
• Make it an actually auth proxy
  • JWT authentication
  • OAuth2 authentication
• Testing with Mocha & Chai
  • Duplicate tests are not working
  • refresh token tests
  • user models tests
• use bcrypt with async
• validate username
• validate password to be more restrictive
• terms of services must be accepted
• tos oauth
• reset password website
• email authentication website
• hCaptcha
• check for tokenVersion in accessToken
• revoke tokenAccess should probably not be public
• logout cookie removing
• log in with username or email
• TypeScript
• yarn doc