Skip to content

Login using sessions

Thu Ra requested to merge login-sessions into master

Change how user identity is maintained:

  • Use Raven for first time authentication, then maintain logged in user with session keys. Sessions remain active as long as they are being used, and can be managed from a settings page to logout any that are dead.
  • Database has been split for users of the system vs profiles.
  • Ansible configuration has been imported, used to maintain the necessary Apache configuration
  • Will allow authentication and user permissions to be moved to a request-level scope for finer control in future and possibility of using other authentication methods

Merge request reports