getting-started-todo
getting-started-todo copied to clipboard
Implement authentication
Can you implement a simple authentication? It would be usefull since authentication is the mandatory part of web applications.
+1 Practically useless for out of the box- production without auth, since everything is public and a big security issue. SSL with a self signed cert would be nice too- so we could change it on the fly.
+1 Also how to sync with remote db with AuthN AuthZ in mind
I have CouchDB. I deleted my remote database. My front-end PouchDB automatically re-created it.
Nifty! And very git-like. However, doesn't that mean my users can't start creating databases willy-nilly? Now I'm worried about security.
So I think another commit on security and auth would be a great addition. You can file it under "advanced" and tag it for DevOps (I presume back-end team would have to understand it).