edx/edx-notes-api — pull request #3 by tymofij (2014-12-04 16:51:00+00:00)
Title: TNL-782 each request should have valid ID Token

supersedes #2, approved by @olmar
Each incoming request is expected to have signed non-expired JSON Web Token, containing information about user (sub), matching edx-notes client id (to be set in provider's database) and signed with edx-notes client secret (the same).

https://openedx.atlassian.net/browse/TNL-782

@jimabramson @polesye
cc @jzoldak @benpatterson