18 lines
1.2 KiB
Markdown
18 lines
1.2 KiB
Markdown
|
# Login with Keycloak: tasks
|
||
|
|
|
||
|
|
Tasks 1 to 4 were built before this spec was written; their commits are listed for reference.
|
||
|
|
|
||
|
|
- [x] 1. **Keycloak**: guest authenticator and cleanup task, realm export, Docker image, compose service, nginx
|
||
|
|
proxy and rate limit, integration tests. (`7c99a76`)
|
||
|
|
- [x] 2. **Backend**: token verifier, WebSocket `auth` handshake, several sockets per user, player names in games,
|
||
|
|
`LEGACY_USERKEY_AUTH`, tests. (`30ad51c`)
|
||
|
|
- [x] 3. **Local packages**: apps and `@mancala/core` link the packages in this repo instead of the npm releases, so
|
||
|
|
the auth channels and types can be shared. (`e165b0a`)
|
||
|
|
- [x] 4. **Web app**: `AuthService` with `oidc-client-ts`, startup flow, account menu, token renewal over the open
|
||
|
|
connection, names on the game page; auth channels and types moved to core. (`f5dcf93`)
|
||
|
|
- [ ] 5. **Mobile app**: `mancala-mobile` client in the realm and in `KEYCLOAK_CLIENT_IDS`, `react-native-app-auth`,
|
||
|
|
guest login on first launch, token login instead of `?userKey=`, account screens, names; tested on a device.
|
||
|
|
Details in `TODO.md`.
|
||
|
|
- [ ] 6. **Legacy off**: once old app versions are no longer used, set `LEGACY_USERKEY_AUTH=false`, which also
|
||
|
|
removes `/register`.
|