Persistent Cookies

[jacobrs]

Bug Description

The Redux client server doesn't cache cookies returned by the API server. This means the subsequent API calls will not send the authentication tokens and the initial login call is the only working authenticated page. This means that other API calls will not be authenticated by the passport middleware and hence won't return a user object when calls are complete. The lack of tracking the current user defies the purpose of a login.

Solution

Look into redux-cookies or redux-cookie to merge API cookies into the global client store and then unload them in the browser's cookies. An authentication test will need to be conducted in order to make sure the cookies are persistent.

Login Flow (Yellow Box is Missing)

Agile Information

Priority: high
Risk: low
Estimated time: 8 hours