Secure user registration

[Sabine-Justilien]

Background on the problem the feature will solve/improved user experience

Users of the application will be required to log-in ahead of accessing the application's capabilities.

Describe the solution you'd like

As an upstander / contacted person I can securely register for the platform, knowing my identity will be privacy protected.

Tasks

• [ ] create authentication protocol - [ ] investigate IBM AppID
• [ ] create authorization protocol
• [ ] User journey/Technical requirements session

TBD

Technical requirements

• Registration DB
• Password protection (MFA)
• SSO (?)

Roles Required

• React
• React Native
• User authorisation (e.g. https://auth0.com/blog/complete-guide-to-react-user-authentication/)

Acceptance Criteria

• A user can sign up with an email address or social log in
• They are able to set a password for their account use
• They are able to retrieve their email, username, or password if forgotten

[Sabine-Justilien]

Need to investigate

• Define what permissions/authorizations are required for different parts of the app
• Authorizations will look differently for various users: witness to a contact (recorder), contacted person being recorded, administrator (NGO, accountability agency, evidentiary review).
• Unregistration process
• IBM App ID v Auth0