Social authentication, password confirmation and recovery

[JithinKS97]

To add social authentication using Github and Google. Password confirmation and recovery.
https://guide.meteor.com/accounts.html
https://docs.meteor.com/api/passwords.html

[ashneeldas2]

@JithinKS97 @nickmcintyre I’ve set up GitHub authentication and will soon do Google authentication, which will be an extremely similar process to GitHub. However, I am being cautious about pushing the code because it contains secret API keys that should probably not be put online.

I’m currently trying to figure out a way to hide these API keys, perhaps using environment variables. Alternatively, for the time being I can just push what I have and once we actually push to production I can set up a completely new project on the GitHub and Google APIs so the keys don’t get leaked.

If either of you have any pointers on how we could possibly hide these variables, please let me know.

[nickmcintyre]

Meteor.settings are probably the way to go. @JithinKS97 may have a settings.json file somewhere on his local machine. Here is a quick tutorial.

[JithinKS97]

I will add @ashneeldas2 as a collaborator in heroku where the app is hosted. So Ashneel can set environment variables directly using Heroku GUI.