Use a gateway to validate the session

[ozairs]

Use a gateway to validate requests from logged-in users. The session is generated using an Auth0 access token, so the gateway will need to validate the access token with Auth0.

[ozairs]

Design

Microgateway needs to validate user session from Auth0 using the Auth0 introspection support. It will need to retrieve the JWK from the known input and use that to validate the JWT token.

This will need to be done for specific URIs (/api/favourite/list) when the user session needs to be validated.

Enable CORs for requests from SPA