User Authentication

[mark-velez]

As I mentioned here, Columbia may have more immediate needs for authentication. Specifically, I foresee us wanting authentication via LDAP to access WebAPI through Atlas. I am limiting the scope of this issue to authentication. If we are to implement a solution however, we don't want to preclude it from being more generally useful, becoming more robust. I'm listing here related objectives that have been mentioned so we keep this in sight:

• Limit deployment overhead (Don't complicate WebAPI/Atlas install)
• Allow for integration with existing infrastructure (AD/LDAP, OAuth providers)
• If storing sensitive user information, take special care regarding sql injection
• Make way for some flavor of authorization
• Auditing

@fdefalco has mentioned Shiro as a possible framework and it appears that some efforts have been made already.

[mark-velez]

There is a pull request from @ganisimov. Has anyone reviewed this and do we intend for the shiro branch to be merged to master?

[t-abdul-basser]

Related to issue #105 (Shiro PR)

[fdefalco]

The work done by @ganisimov builds off of some earlier work that had been done by @GlebMalikov. It isn't ready for integration yet however progress is being made towards its completion.

[anthonysena]

Tying to Atlas OHDSI/Atlas#86