andlo779 / cement Goto Github PK

As a USER I want to be able to login in the user interface so I can see the resources I have the access to.

Acceptance criteria:

• add Login button to Navigation
• when user click on Login show a pop-up with username/password form
• if 200:
  • if session-id:
    • new layout on pop-up with OTP form
      • normal error handling
  • if access-token:
    • close pop-up
  • then close pop-up
• if 401:
  • empty password field + display error message

User flow [WIP]

1. User go to /
2. Main page is loaded with Header and Footer
   • Header has navigation to home + about + login
3. User clicks on Login
4. Login popup is shown
5. User provides auth data + clicks login (send)
   • If TwoFactorAuth is active new popup is shown
   • User provides OTP + click login
6. Popup is minimised + login in Header changes to logout + Left side Navigation is shown
   • Navigation can be minimised (burger style)

As a user I want to be able to use the functionality from Concrete app in a web browser.

Acceptance criteria:

• new GitHub project: Cement
• teck stack (npm init vite@latest demo-project -- --template react-ts)
  • Vite
  • React
  • TypeScript
• GitHub Actions for build lint and test?
• Two pages:
  • Main
    • content:
      • Simple welcome message
  • About
    • content:
      • Small text about this project
      • Link to email
      • Link to GitHub (Concrete + Cement)
  • Navigation
    • static navigation to Main(Home?) and About page
    • position: top left (header)
  • Footer
    • Licence (MIT link to GitHub?)
    • Copyright (Andreas Lord + email link)
    • Link to About

Lessons learned:

This task was already way to big 😄
And some of the acceptance criteria needs more discovery, like Copyright.

As a USER I want to be able to log out and close active session in application so no one can access my resources even if they get hold of my device.

TODO - split into two tasks (one for FE and one for BE, GitHub issues can only be linked to one repo)

Acceptance criteria:

• Logout button
• Clear access + refresh -token from FE-app
• Delete active(?) refresh-token in BE
• Update login status to logged out in FE

As a USER I want to be able to see if I am logged in in the UI.

Acceptance criteria:

TBD

As a DEVELOPER I want my code to be build every time I push my code to GitHub.

As a USER I want my login session to be active as long as I want.

Acceptance criteria:

• if BE response with 401 and refresh token exists:
  • use refresh token to retrieve new access token
  • if successfully retrieved new access-token: retry last call
  • if not: logout user (?? - depends on login status ticket)