Monthly Milestone - February 2019 💝⛄️

[dhmlau]

February milestone

• Authentication & Authorization story
• Spikes on LB3->LB4 Migration
• Groundwork for LB4 extensibility
• Prep work for presentations at events

Note:

• We have committed more than our usual velocity because some are almost done, and some need to happen (e.g. conference prep work).
• We normally don't include PRs in the milestone, but the extensibility PRs are laying the foundation and already taking a lot of the team's time for review.

LoopBack 4

• Authentication & Authorization Authentication and Authorization extension points #1035

  • Store hashed password in the login function Store hashed password in the login function loopback4-example-shopping#35
  • Refactor authentication util functions into a service Refactor authentication util functions into a service loopback4-example-shopping#40

• Improve LB4 extensibility PRs

  • 🚶feat(context): add support to watch context bindings, feat(context): add support to watch context bindings #2122
  • 🚶feat(context): support binding config and @inject.config, feat(context): add support for binding configuration and injection #2259
  • 🚶[RFC] Greeter extension to illustrate extension point/extension pattern, feat: add greeter extension to illustrate extension point/extension pattern #2249
  • 🚶feat(core): introduce basic life cycle support for LoopBack applications, feat(core): introduce basic life cycle support for LoopBack applications #1928
  • 🚶feat(events): add basic async events support, feat(events): add basic async events support #1972

• Migration Migration from LoopBack 3.x #1849

  • Continue the work on the original spike [Spike] Drop LB3 model files into LB4 app #2224
  • Spike: Mount LB3 app and include its REST API in OpenAPI spec Spike: Mount LB3 app and include its REST API in OpenAPI spec #2301

• User adoption

  • Spike: How to write a LB3-like application in JavaScript, https://github.com/strongloop/loopback-next/issues/1978.  Last iteration of the spike.
  • Tutorial/Blog to show how to mount LB app to Express/Koa as middleware, Tutorial/Blog: how to mount LB app as Express/Koa middleware #1982

• Deployment to IBM Cloud

  • [Spike] k8s based deployment with IBM Cloud [Spike] Deploy a basic LB4 application to IBM Cloud Kubernetes #1606

• Conference preparation

  • Update Quicklab for Code@Think Update Quicklab for Think Conference #2253
  • Prep work / presentation at DeveloperWeek 2019  & THINK 2019

• Bugs

  • [Spike] Partial update (PATCH) over REST [Spike] Reference a Model/type and add additional constraints #2082

• Others

  • APIConnect 5.0.8.6 toolkit and collective testing https://github.com/strongloop-internal/scrum-apex/issues/405
  • 🚶Step-by-step instructions to submit a PR, Step-by-step instructions to submit a PR #2280

Stretch Goals

• Authentication

  • Extension point for register passport strategies  Creating adapter for the plugged in passport strategies #2311 Moved to Q2
  • Extension point for register non-passport actions Extension point for registering the authentication strategies #2312
  • Make UserProfile more flexible [Spike]Make model UserProfile more flexible #2246
  • Add logout endpoint in the user controller Add logout function to invalidate the accesstoken loopback4-example-shopping#36

• Bug:

  • Mongo fails to find user by id (hasMany relation not working) Mongo fails to find user by id (hasMany relation not working) #2085
  • [Spike] hasMany relation to same Entity fails [Spike] HasMany relation to same Entity #1682
  • [Spike] Explorer the way to resolve inclusion property https://github.com/strongloop/loopback-next/issues/2152. 
  • Partial update (PATCH) over REST, https://github.com/strongloop/loopback-next/issues/1722. 
  • hasMany relation to same Entity fails hasMany relation to same Entity fails #1571

LoopBack 3

• 🚶Fix the vulnerability issue caused by swagger-ui@2.x Fix the vulnerability caused by swagger-ui strongloop/loopback-component-explorer#254

[jannyHou]

@dhmlau @nabdelgadir According to the estimation meeting yesterday, #2311 is blocked by #2249, I propose we work on loopbackio/loopback4-example-shopping#40 as a replacement, there is already a PR in progress for it: loopbackio/loopback4-example-shopping#33
what would you think?

[nabdelgadir]

@jannyHou sounds good to me. @dhmlau what do you think?

[dhmlau]

@nabdelgadir, @jannyHou and I were just discussing this, and we've modified the milestone.

[dhmlau]

Based on the discussion summarized in here, the next step for the authentication story is

• Step 1a: create extension point for access token generator in @loopback/authentication, define the key as the constant and interface

• in shopping example, it will implement this access token generator
• Step 1b: create interface for strategy and then the extension point for strategies -- needs Raymond's PR
• Step 1c: Add common action to authenticate inside authentication module.
• ** Step 1d**: Move the credential extractor code from the example app back to the authentication package.
• Step 2 : rebase shopping example against the @loopback/authentication

So the stretch goals under authentication epic won't be carried over to March, and @jannyHou will be creating new set of tasks for the above.