API: Unify restricted use token generation and validation

[citizenos]

API: Unify restricted use token generation and validation

[tiblu]

Expects tokens payload path to match req.path:

• GET /api/users/:userId/topics/:topicId/votes/:voteId/downloads/bdocs/final
  • Update tests
• GET /api/topics/:topicId/votes/:voteId/downloads/bdocs/final - the Parliament e-mail! BW COMP!
  • Update tests
  • BW comp test
• GET /api/users/:userId/topics/:topicId/votes/:voteId/downloads/zip/final
  • Update tests
• GET /api/topics/:topicId/votes/:voteId/downloads/zip/final
  • Update tests
• POST /api/topics/:topicId/events - the Parliament e-mail! BW COMP!
  • Update tests
  • BW comp test
• GET /api/topics/:topicId/comments/:commentId/reports/:reportId
  • Update tests
  • BW comp test
• GET /api/users/:userId/topics/:topicId/comments/:commentId/reports/:reportId
  • Update tests
  • BW comp test
• POST /api/topics/:topicId/comments/:commentId/reports/:reportId/moderate
  • Update tests
  • BW comp test

[tiblu]

Created a library to issue and verify the restricted use tokens - https://github.com/citizenos/citizenos-api/blob/master/libs/cosJwt.js
Created a middleware to validate restricted use tokens and used where possible - https://github.com/citizenos/citizenos-api/blob/master/libs/middleware/authTokenRestrictedUse.js

[tiblu]

Idea for TESTING ONLY: sniffer that validates all API links sent in e-mails, checks that they work.
#81

[tiblu]

Live.