Executive Summary:

• Agora Tutoring is an online marketplace akin to Kijiji, equipped with a map function similar to Uber, specializing in connecting students with local tutors for in-person educational sessions.

Project Goal:

• The primary goal of this project is to integrate OAuth-based user authentication with Facebook and Google into the Agora Tutoring platform. By incorporating these widely used authentication methods, the project aims to streamline the login process for users, thereby enhancing user accessibility and improving security measures.

Problem Statement:

• Currently, users of the Agora Tutoring platform must go through a traditional account creation process that requires them to manually enter personal details to register. This method can be time-consuming and poses a barrier to quick access. Moreover, managing separate usernames and passwords for multiple platforms can discourage potential users due to the inconvenience and increased risk of security breaches.

To successfully achieve the project goal of integrating OAuth-based authentication for Facebook and Google into the Agora Tutoring platform, learners will need to undertake several structured tasks. These activities are designed to cover all aspects of development, from initial setup to final deployment and testing. Here’s a breakdown of the essential tasks:

1.       Research and Planning

• Understand OAuth 2.0: Research the OAuth 2.0 protocol to understand how it works and why it is secure.
• Study Existing Systems: Review the current authentication system on Agora Tutoring to determine how best to integrate OAuth.
• Obtain API Credentials: Register the application with Facebook and Google to obtain necessary client IDs and secrets.

2.       Backend Development

Set Up Authentication Framework:

•  Install and configure Passport.js in the Express backend.
•  Set up Passport strategies for Facebook and Google.

Secure Handling of Credentials and Tokens:

•  Implement secure storage and handling of OAuth tokens and user credentials.
•  Ensure all data exchanges occur over HTTPS.

Database Schema Modification:

•  Update the MongoDB schema to store new data elements related to OAuth, such as tokens and user profile information from Facebook and Google.

3.       Frontend Development

UI/UX Design for Login:

•  Design and implement login buttons or links for Facebook and Google on the existing user interface.
•  Ensure the design is intuitive and aligns with the platform’s aesthetic.

Implement Client-Side OAuth Flows:

•  Handle redirection to OAuth services and manage callbacks from Facebook and Google.
•  Use Apollo to manage data fetching and integration into the frontend.

4.       Integration and Testing

Integrate Frontend and Backend:

•  Ensure the frontend and backend are seamlessly integrated to handle OAuth logic.
•  Test the complete flow from user interaction to data storage.

Security Audits and Penetration Testing:

•  Conduct thorough security audits to identify any potential vulnerabilities.
•  Test for common security threats in OAuth implementations.

5.       Deployment and Evaluation

Staging Deployment:

•  Deploy the integration in a staging environment to simulate real-user scenarios.
•  Monitor performance and troubleshoot any issues that arise.

User Acceptance Testing:

•  Allow a controlled group of users to test the new login system.
•  Gather feedback on usability and any encountered issues.

Final Deployment:

•  Deploy the system to production after making necessary adjustments based on feedback and test results.

6.       Documentation and Reporting

Document the Development Process:

•  Maintain detailed documentation of the development process, configurations, and setups for future reference and scaling.

Prepare Final Report:

•  Compile a final report summarizing the research, development process, testing outcomes, and user feedback.
•  Evaluate the project against the initial goals and objectives.

Conclusion

By completing these activities, learners will not only achieve the project goal but also gain valuable experience in modern web development practices and security protocols. This project will serve as a practical application of their learning, preparing them for future challenges in tech-related fields.