microsoft / DLWorkspace / 1967

93%

master: 93%

push

travis-ci

Dashboard: Clarify password and token.

Password: The only term user should use, which is the string-typed user
credential for dashboard API use. User should pass `email` as well as
`password` as queries in API call to get access of the dashboard
resource. For backward compatibility, `token` is also available in
query, which is deprecated.

Token: Internal used in dashboard **backend**, which stands for the
Buffer-typed password. Backend always does not store the string-typed
password for security reasons.

IdToken: jwt typed token from Azure Active Directory

CookieToken: `token` field value in cookie, jwt typed. Should be plain
since koa already provided a signed cookie approach.

53 of 65 branches covered (81.54%)

Branch coverage included in aggregate %.

492 of 520 relevant lines covered (94.62%)

6.55 hits per line