[Feat] - Server Auth: Phase 1

[gowthamsundaresan]

Goal

Middleware API token based auth system to check if a caller is authenticated (record exists and accessLevel > 0). For Phase 1, total number of API calls will be capped for unauthenticated callers. In Phase 2, we will setup a dev portal linked to Stripe that will dictate accessLevel basis tiered plans.

Considerations

• Best way to manage multiple DB connections (Backend & Dashboard)
• Logging of each API request in the Dashboard DB (user <> token <> request)
• Best way to manage cache store/update of API tokens & their accessLevels
• Rate limiter will check for API token instead & fallback to IP address