Valtteri Pajunen

Handling of expired tokens

6

On server side, we are using different scopes of authentication. Mainly `ReadScope` and `WriteScope`. What this means is actions requiring `WriteScope` will require much younger authentication token than `ReadScope` does....

In order to support paper products, we need to know the first name, last name and address of the customer. We should add this step after we register the new...

Handle invalid form values

4

Handle `FormFieldError` here https://github.com/KSF-Media/affresco/blob/master/apps/vetrina/src/Vetrina/Main.purs#L408-L415

Remember purchase state

1

Remember the state user was and restore it on page reload.

Audit OrderFailure

1

See that [OrderFailure type](https://github.com/KSF-Media/affresco/blob/master/packages/vetrina/src/Vetrina/Vetrina.purs#L92) makes sense and audit/fix places where it's being used. For instance, we are wildly using `UnexpectedError` in situations where probably better constructors exists.

Maybe it's not good to just throw here: https://github.com/KSF-Media/affresco/blob/master/packages/user/src/User/User.purs#L358

In the registration form, we should not validate the password and email input fields while the user is typing (as it's a bit annoying to the user to show an...