rinminase/anidb-be

💬🐳 Rin Minase's AniDB API Service utilizing the latest version of Laravel and deployed to Heroku

anidb-be's Issues

Add Social login

Add social logins with :

• Google
• Facebook
• Github

References :

• Laravel Docs - Socialite
• GitHub - Socialite with Lumen Example
• StackOverflow - Socialite with Lumen
• Add Login with Google to your Laravel app

Add Cron tasks for clearing dated entries in the database

NOTE:

• This runs every midnight (GMT or server time)

Sessions

• If token is expired

Users

• If date created is greater than 12 hours and is not yet verified

Use API for exchange rate for summary - unit specs

Request exchange rate using the link below :

https://api.exchangeratesapi.io/latest?base=<currency>&symbols=<currency>

Where :

• base - is the base currency to convert from
• symbols - is the target currency to convert to (e.g. USD,GBP)

Parse image URL contents before returning response

Error should be displayed instead of a URL if the URL contains NoSuchKey error upon parsing the XML

Throw an error on 'mal' API request with disabled scraper on env

Add MAL Requests

Use Argon2ID for password hashing instead of BCrypt

Use Argon2id for password hashing with as much the following parameters:

time_cost = 40
memory_cost = 128000 (128MB)
threads = 16

These values were taken from OWASP Password Storage Cheat Sheet

Target 1.5 seconds for API response time, 2 seconds at most.

Priority of changes from most to least:

• time_cost
• threads
• memory_cost

Notes :
time_cost - should not be less than 2
threads - should not be less than 2, prod = 16, local = 32

Additional Optional TODO :

• Add environmental values for these Argon parameters

References :
Choosing the right parameters for Argon2
Argon2 Parameters
OWASP Password Cheat Sheet - Argon2
Argon2 Specifications