I've started working on authorisation stuff in a new dev branch. Scentry (the authorisation lib built into Scalatra) shouldn't be too hard to set up, but we need to determine what strategy we want to go with for auth. Will we even need cookies if the app is going to be a single page and we assume the user won't navigate away from it? How will the front-end communicate auth status to the backend? Et cetera.
I've started working on authorisation stuff in a new dev branch. Scentry (the authorisation lib built into Scalatra) shouldn't be too hard to set up, but we need to determine what strategy we want to go with for auth. Will we even need cookies if the app is going to be a single page and we assume the user won't navigate away from it? How will the front-end communicate auth status to the backend? Et cetera.