Update UseAuthentication middleware to support sessions

[asmahood]

Description

The UseAuthentication middleware currently verifies that the JWT token is valid. To support session management, this needs to be updated to check for either a session ID or a JWT cookie. If a session ID is present in the request, use the session ID lookup logic. If the cookie is a JWT, use the existing JWT authentication logic. This is to keep backwards compatibility with the app.

We will remove the JWT logic at a later point.

For details on how this should be modified, view the example sequence diagram.

Approach

• Check if cookie is either a session ID or JWT
  • If session ID
    • Implement this sequence diagram.
  • If JWT
    • Run existing logic

---

Blocks

Blocked By

• Add the session table to the database schema #272
• Add new route for session based login #273

Related To

[asmahood]

This won't be backwards compatible with the proposed changes. Resolved.