Generate & Store Login token

[marla-singer]

Description

For better integration with OpenAPI Designer and/or OpenAPI Space, APInf needs to provide User ID and Login token. Right now generation and storage of Login Token don't exist.

Goal

• Generate Login token for user after Login and store it
• Remove Login token after Logout
• Provide Login token and User ID into OpenAPI Designer (Reference Add OpenAPI designer iframe integration #2780)

[bajiat]

@marla-singer Could you please add a description of the problem that needs to be solved with this issue?

[marla-singer]

@bajiat this issue will allow resolving the problem with authorization APInf users in OpenAPI Space/Designer. For correct working of authorization we need to provide User ID and Login token. Right now generation and storage of Login Token don't exist.

Link to documentation of OpenAPI Desginer: https://github.com/apinf/openapi-designer/blob/master/docs/INTEGRATION.md#apinf-login

[deligence-dharmendra]

Hi @marla-singer @matleppa
Currently, I have got multiple login tokens for the same user, because of same user login with two different browsers at the same time.
Can You suggest me how to manage loginTokens if multiple tokens exist for the same user?

resume: {…}
loginTokens: […]
0: Object { 
		when: Date 2017-12-21T10:20:15.341Z,
		hashedToken: "7pY0YZJipZdq0xuwjbRWgc0ESJ8s94/9m4v00Z+Qysk="
	}
1: Object { 
		when: Date 2017-12-21T12:44:24.265Z,
		hashedToken: "8rgnh0b8jYrSd5KRRdfXTV6Xd4mAX+N17zhPkj/Iqaw="
	}
length: 2

Please advise

[marla-singer]

Hi @deligence-dharmendra , I think the valid token can be one and that is the last added

[deligence-dharmendra]

Hi @marla-singer
I have used browser side local storage for getting login token in place of user collection.I think it is the right way.What you think about it.

Please advise.