Alberto Gimeno

Suggestion: separated starter script form codebase

4

Initially based on the script you have that runs after installing the dependencies, I've created a script that simplifies the process in only one step (it clones the repo and...

Use browserify's polyfills

2

Browserify implements many Node.js libraries but for the browser, such as [http](https://github.com/substack/http-browserify), [crypto](https://github.com/crypto-browserify/crypto-browserify), [buffer](https://github.com/feross/buffer) . Since they work in a browser, they should work in a webview.

Show development tools

1

I was trying to implement the `window.webContents.openDevTools()` method. It's not trivial programmatically but can be open manually if the `developerExtrasEnabled` flag is set to `TRUE`. ```objc WKWebView *webView = [[WKWebView...

Brute force attacks protection

6

There should be protection agains brute force attacks by slowing down the server: - Many failed logins from same IP - Many failed logins to the same email (even if...

Support more third party SMS services

1

We are supporting Twilio but we could support more services.

Support more third party sign in services

1

Only Facebook is implemented right now. The plan is to support: google, facebook, twitter and github. `facebook.js` should be used as an example.

There are almost no tests right now. There should be unit and integration tests.

It would be useful to limit email addresses of users to certain domains. For example if we want to build an internal tool using this microservice, we would like to...

Server-side validations

1

This can be considered a bug. Right now forms are not validated in the server-side. Both server and client sides should use the same validation rules defined in `validations.js`

Notify the user when 2FA has been enabled or disabled.