Feature: nest.js and access_token

[dylanmcreynolds]

Access Token

The loopback3 version of backend accepts tokens via the access_token query parameter. The nest.js version accepts them via the Authorization: bearer header. Should the nest.js implementation accept both so that existing clients are more compatible?

Summary

In SciCatProject/pyscicat#10 (comment), we discuss how to send the token for pyscicat. Since that project is relatively new, several possibilities exist for maintaining forward compatibility with the nest.js implementation. However, before we bake a solution, I wanted to raise the possibility of supporting both methods of accepting access token in nest.js as there probably multiple clients that exist (pyscicat, the React-based app from MAX-IV, custom code that has been written at RFI).