WebUI Authentication

[akira]

We should provide a first class way to auth. For now i think basic auth is fine, but rather than rely on nginx or an upstream plug we should bake it in.

Moved over from akira/exq#46

[isaacsanders]

As a potential user, I would prefer a configuration option for an auth_plug (or something similar) that can be inserted into the flow, so if one wishes to deploy/configure exq_ui as a standalone application, they can manage authentication (and maybe also their own authorization) from there.

Maybe a module/struct for user information so that the auth system can be integrated to embed the information.

[akira]

@isaacsanders an auth_plug could definitely work here

[jozefvaclavik]

Just for others reference, I'm using Coherence and all I had to do was add protected plug o :exq pipeline.

  # router.ex
  pipeline :exq do
    plug :accepts, ["html"]
    plug :fetch_session
    plug :fetch_flash
    plug :put_secure_browser_headers
    plug Coherence.Authentication.Session, protected: true # <--- Add coherence protected plug
    plug ExqUi.RouterPlug, namespace: "exq"
  end

  scope "/exq", ExqUi do
    pipe_through :exq
    forward "/", RouterPlug.Router, :index
  end

[jaimeiniesta]

Related, here I'm using BasicAuth - but this leaves the access via port open

#70