Simon Erkelens

As from issue #15 , to clarify how to use

Before or after resolving and validating the token, non-harmful operations to the token should be allowed. E.g. a mapping from Facebook ID to local member ID.

A token should provide enough information to handle the required permissions. Currently, a ShadowCopy is required before JWT can be used. This defies the purpose of being fully stateless.

Tokens are refreshed based on validity. Long Term tokens _should_ actually be used there

I think it would be great if you added some screenshots to the Readme :)

The recaptcha intercepts the request and breaks the flow, including not letting the form finish it's validation. It would be nicer to continue the flow instead of breaking out and...

libboost 1.65

1

This is probably going to be "Do it yourself please", but it's worth asking :) Raspberry Pi OS nowadays ships LibBoost 1.62, 1.67 or 1.71, however, your MongoDB built requires...

Generate timing report

1

After running the tests, a summary of tests that ran longer than a given amount of time would be nice.

Set-up on CapRover

2

I'm trying to set up BorgWarehouse on a CapRover server (Using docker). Despite setting up the volumes and the environment variables, it doesn't seem to be willing to start. And...