Dev/#107 Authentication tokens for APIs

[tuz666]

A long awaited missing piece of our Arcsi seems to be finished soon. (#107 , #108 )

Our first idea to implement authentication token handling was to start using flask-praetorian, which is a light-weight, API-oriented security package. (#126 ) As far as I remember we also thought that flask-security - what we are using currently - is a dead project and doesn't supported anymore.

I made some attempts to import flask-praetorian into our code parallelly with flask-security. During these process and research it turned out that flask-security also contains the features which we wanted to bring in with flask-praetorian. Also I found a package named flask-security-too, which is an independent well-maintained fork with high code coverage and nice documentation. After these news I stopped the experiments with flask-praetorian and started to work with flask-security.

[pvj]

Commented your draft Solid first steps and good test db and test key set-up. I hope to help when you continue

[gammaw]

@tuz666 FYI I added the nginx config adjustment (da0220a).

[gammaw]

@tuz666 thanks for the bold changes! Looks just like we discussed, I just had a couple of questions for clarification before I approve. Can you look into them?

[gammaw]

Thanks for the comments and the changes, especially, the Swagger updates, which was additional work! Let's start step 1 then (arcsi release w/ only POST APIs being protected)!

[tuz666]

Thanks for the review @gammaw , I will push the green button then :)