UI to search signed agreements, completes auth for administrators #18
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Admin UI to see signed CLA objects is implemented in the simplest way possible: it enables searching for CLA by contributor email address. Initially it was taken into consideration to implement a table of signed CLAs, but this would require much more work as it requires paging, etc.
Authentication for administrators work by integration with GitHub sign-in, using the same OAuth application used for contributors. CLA-bot verifies that the user who signed in is indeed an administrator, and issues a JWT. The client side verifies that an access token exists before rendering the admin UI.
APIs that manipulate information in the database require JWT Bearer Authorization header. GET methods that return read-only public information, such as agreements list and texts, are still public (they don't require an access token).
Added several other improvements to the existing code. For example, possibility to display dates in EN-GB format instead of EN-US format.