Another go at an OAuth module

[rogerhutchings]

I rewrote my previous implementation largely from scratch, and I think it's a lot better for it.

This version will eventually do all token handling itself, and request new tokens via an iFrame, so no page redirects are needed outside of the initial auth. That's currently blocked by zooniverse/panoptes#1673

It'll also have a much simpler API - init to enable URL watching etc, then checkCurrent, signIn and signOut.

Currently a work in progress, please do not merge.

[rogerhutchings]

This is ready to go now. The API is as follows:

init(appID) 
    - takes a Panoptes app id as an argument
    - sets up a watcher to deserialize any token details found in the URL
    - attempts to pick up any existing Panoptes sessions, should be run at app start

signIn(redirectUri)
    - takes a redirect URI as an argument
    - clears any existing session, and redirects to Doorkeeper to sign the user in

signOut()
    - signs the user out

checkCurrent()
    - attempts to retrieve the authorized user object

Fix #13

[brian-c]

Should this be ls.set?

[simoneduca]

@brian-c are your comments blocking the merge? If so, I'm not sure when @rogerhutchings will be able to address them. I'd be happy to have a look too.

[brian-c]

I still haven't been able to get this to work. Will run through it again today.

[simoneduca]

Cool thanks, let me know how it goes please.

[brian-c]

Workin' fine now. Will look into figuring out a nice way to test automate testing this.

[brian-c]

Published in v2.1.0.

[simoneduca]

👍