fix: user registration - encrypting credentials

[hn275]

at endpoint /users/, server now expects a jwt of user credentials, here's the request body:

{
    "credentials": "<jwt-encoded-string>"
}

the secret you need is in .env (JWT_SECRET entry) in server repo, refer to PR #47 (though this is probably subjected to change for release.)

Here's an example of the claim:

{
  "iat": 1516239022,
  "exp": 3526239022,
  "credentials": {
    "username": "foo",
    "school_id": "UVIC",
    "faculty": "computer_science",
    "year_of_study": "two",
    "password": "bar",
    "email": "[email protected]"
  }
}

• Set the exp props of your choice.
• This a proof of concept. There might be more claim fields to be included in the future (iss, aud for starter.)

This is the corresponding jwt, for testing purposes:

eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpYXQiOjE1MTYyMzkwMjIsImV4cCI6MzUyNjIzOTAyMiwiY3JlZGVudGlhbHMiOnsidXNlcm5hbWUiOiJmb28iLCJzY2hvb2xfaWQiOiJVVklDIiwiZmFjdWx0eSI6ImNvbXB1dGVyX3NjaWVuY2UiLCJ5ZWFyX29mX3N0dWR5IjoidHdvIiwicGFzc3dvcmQiOiJiYXIiLCJlbWFpbCI6ImZvb0BiYXIuY29tIn19.Aem7IGS4hpwi2rnXD8xnST4PK1rG6u8UN9vy0qQTYwk

https://jwt.io/ (leave the secret base64 encoded unchecked)

[hn275]

no longer using jwt in server