Complete authentication and authorization strategies

[RobertoPrevato]

• Implement JWT Bearer authentication in a single place in code, for example in a Express.js middleware (in such case, add integration with Express.js)
• Complete the piece of code that, following a redirect from GitHub after successful login in the Admin login page, validates that the person is an administrator by verified email address
• • display an error page to unauthorized users
• • create a JWT token used and validated by the same application
• • redirect authorized admins to the admin page
• • include JWT token as Authorization: Bearer <token> header in API requests
• Implement authorization function decorator, so that API routes can be decorated this way:

@auth()
async def example(res, req): Promise<...> {

}

• decorate functions that require authorization