Admin Login

[meganniu]

Deadline: March 24

User schema: Notion
Wireframes: Figma

• Contact Bonnie with design questions or drop them in #designer-babies channel

Acceptance Criteria

• TPC staff, who have already correctly created an account with their @pregnancycentre.ca email, can log in with their chosen account email and password
• If email or password is incorrect, fields will show appropriate error message as per the design on submit

Not doing

• 2 factor auth
• Captchas
• Locking accounts after x attempts

Tasks

• Login page
  • Use Firebase sdk to login user
  • Send Firebase ID token with every request to backend server
    • send id token as an httpOnly cookie (don't send token in header or body)
    • How is the cookie refreshed when the Firebase ID token expires?
• Authenticate user in server
  • Verify Firebase ID token using Firebase sdk
  • Return apollo AuthenticationError if unable to verify ID token

Useful Resources

• https://blog.morizyun.com/javascript/typescript-tutorial-firebase-auth-graphql-react.html
• https://github.com/develomark/graphql-server-firebase-authentication-example/blob/master/src/firebase.ts
• https://stackoverflow.com/questions/51012955/react-firebase-authentication-with-apollo-graphql
• https://stackoverflow.com/questions/61569962/firestore-cloud-functions-apollo-graphql-authentication
  • For server side stuff