Authentication inspired by this StackOverflow answer - $username and $password will be submitted via POST to /admin/login/ - Currently, authentication is proven by having a session with a valid user - This is not sustainable TODO: - JWT Token is generated and saved to session/cookie - Token is checked for/required by all future requests. - Account name also added to cookie
NOT IMPLEMENTED YET. There is middleware for Slim available at the following link