cnpryer / solverstack-user Goto Github PK

For early development it's fine to leave this hardcoded into the repo, but prior to any MVP we need to manage these credentials better.

I'll add secrets to github and to a credentials manager for use when we plan do deploy. We'll update everything to utilize app management beneath one umbrella (probably a generic gmail/org github). I'll also make sure to leverage our secrets management in our CI.

see demo/dev secret utilization

name says it all

Right now on login the username is passed to the crud service and the query result is returned to the user service containing the password hash. The password hash is then compared to the entered password on login. This needs more attention after MVP.