shrihari-prakash / liquid Goto Github PK

Is your feature request related to a problem? Please describe.
A collection in mongo db should be populated for each user login. There should be a GET api to retrieve all history for current user.

Describe the solution you'd like
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

Is your feature request related to a problem? Please describe.
NA
Describe the solution you'd like

• There needs to be a new api POST /2fa that assigns the flag 2faEnabled and 2faMedium.
• The 2faMedium flag should contain the mode of 2FA, like email, sms.
• The availability of the 2FA API should be controlled by option 2fa.email.enabled.
• If admins want to enforce 2FA, the option 2fa.email.enforce should be set to true.
• The /login API should not create a session if 2FA is enforced or the user had enabled 2FA. Instead it should send a verification code to email.
• The /verify-2fa api should be used to post the code sent in previous step. If this phase is success, a session is created.
  Describe alternatives you've considered
  None

Additional context
NA

The client API should accepts an array of objects like:

targets: [
    {
        "sourceId": "abcd",
        "targetId": "defg"
    },
    {
        "sourceId": "hijk",
        "targetId": "lmno"
    }
]

and returns the follow status like:

targets: [
    {
        "sourceId": "abcd",
        "targetId": "defg",
        "status": true
    },
    {
        "sourceId": "hijk",
        "targetId": "lmno",
        "status": false
    }
]

Is your feature request related to a problem? Please describe.
There should be a logout of all sessions feature for logging out incase of catastrophe.

Describe the solution you'd like
Add all sessions and access tokens to Redis when logging in and when request-logout-all request is sent, an email should be sent to the user with a code. On hitting logout-all with the correct code, all the stored sessions and access tokens should be revoked.

Describe alternatives you've considered
NA

Additional context
NA

Is your feature request related to a problem? Please describe.
NA

Describe the solution you'd like
There needs to be an API to update custom data for a user ID and also retrieve it.

Describe alternatives you've considered
NA

Additional context
NA