Skip to content

customer_facing_auth.md

Latest commit

 

History

History
12 lines (10 loc) · 761 Bytes

customer_facing_auth.md

File metadata and controls

12 lines (10 loc) · 761 Bytes

Customer Auth for public-facing website and App

Current State

  • The Moda website currently uses a combination of Devise and Doorkeeper to provide authentication and tokens to customers.
  • There are some limited authorization functionality such as private trunkshows.

Migrating to Identity as a Service (such as Auth0)

  • Decrease internal security threat profile
  • Anomaly-detection and Bot protection utilities
  • Potentially enhance authorization features to customers. For example, VIP customers could be given access to view/purchase items not on the site, private trunkshows, etc.
  • Authorization can be done in a session-less manner.
  • It will cost more