OWASP
Add support for users
OpenCRE could become more useful if users could make an account and select which resources they want to be working with.
This would allow users to not only see and export subgraphs of information but most importantly map their resources to sub-graphs without the noise.
This feature set contains the following sub-features:
- A user should be able to login with an OIDC provider (e.g. google, github, linkedin etc)
- A user should have the ability to select which resources they want to see in their account
Sir what are your requirements after login - 1- User must go to a new page or same home page 2- which db you wanna use {I may use Mongodb} for user credentials.
I am willing to work on this issue ,Plz assign me this issue.
How I will solve the above issue - 1- I will use Auth0 for handling the signup and login mechanism 2- using the above we can easily integrate the OIDC providers 3- Creating a filter to filter out the resources
Sir what are your requirements after login - 1- User must go to a new page or same home page 2- which db you wanna use {I may use Mongodb} for user credentials. This should work seamlessly with the platform, we currently use postgresql as our database and sqlite for development all exposed via a sqlalchemy ORM. A user should be able to filter the resources they want to see after logging in. e.g. not everyone cares about zap rules or asvs or samm or any other resource so they should be able to filter them out if they wish.
I am willing to work on this issue ,Plz assign me this issue.
done
How I will solve the above issue - 1- I will use Auth0 for handling the signup and login mechanism 2- using the above we can easily integrate the OIDC providers 3- Creating a filter to filter out the resources let's start with the login first, let's create the login that can be turned off for local development and then we can work on the filtering.
Hi I have noticed that this issue is inactive for a while, If its okay could you pls assign this to me if its still available?
