ToDo.md

TO Do

Sam

• Auth
  • bb addon auth
    • verify loaded in bb and not external
      • verify QSH to read AAID
  • User login on front end (oAuth 2.0)
  • Admin panel
  • Pauser aaid
  • User permissions
    • frontend checks
    • backend checks
  • Clean up and require auth for /api endpoints
• Remove abstractions
• Server entry point - borked
  • webpack dev server
  • passing in config
  • scripts for dev + prod
• AAID to User Info endpoint
• validate secret from bb on installation
• Linting
• CI
• Move BB requests to using app config (to avoid rate limiting)

Luke

• History
  • Basic history
  • Pagination
• AllowedToLand check is broken
• Productionised config
• addon frontend in react
  • Allow refresh/back on bb addon
• add websockets :D :D :D
• Move the static files route
• Clean up serving of ac.json
• Remove cancel release
• Fix binary file and files arr in package.json
• Add # routes to select tabs
• Load oAuth from config
• Better error messages from config
• Better error messages from APIs
• Validate commit hasnt changed before merge
• Logout
• Remove UUIDs from config
  • Don't require passing in repo-uuid
  • Don't require admins to be AAID
• [-] Don't require hacking ac.json to personal
• Add pausing to admin ui
• show LANDKID_DEPLOYMENT in webpanel
• document deployment process
• Create nicer landing page
• Log stack traces on error (https://github.com/bithavoc/express-winston)

Someone

• Ensure deploy ain't broken