Sprint #1 - Login and Session Research and Design

[jhodapp]

Sprint start/end: 11/29/23 - 12/14/23

Associated with milestone: 0.3

This first sprint focuses on:

1. Are there any mature Rust frameworks or crates that we can use with Axum that provide robust user login & session establishment/management functionality?

2. If yes, become familiar with it by doing small experiments in using it.

[jhodapp]

Login and session research findings

axum-login examples

Axum + Next.js fullstack web application example with login

Auth.js Postgres DB schema

Thanks @qafui and @naconnors for making quick work of this together!

[jhodapp]

Because the research went so quickly, Sprint #1 is going to also include some preliminary work on using axum-login to provide basic user login functionality with username and password.

These should be pre-seeded users into the DB since we don't have a frontend yet and won't really need self-sign-up functionality for this application.

[jhodapp]

More specific focus for the rest of this sprint ending on Dec 14:

• Create a protected route with a very simple "auth" function (simple username and password) [DONE]
• Refactor protected route to use axum-login but otherwise stay the same [DONE]

---

• Research to choose crate for handling JWT tokens (see this article for some options) [DONE]
  • Not using JWT tokens just yet, but jsonwebtoken will be a great choice when we get there
• Good option, jsonwebtoken crate [DONE]

[jhodapp]

We completed sprint #1! Well done and great teamwork @calebbourg and @qafui.