- Document how to add a custom role (like admin/user/public).
- Let
HashPassword
return an error instead of panic if bcrypt should fail. - Let
NewUserState
return an error instead of the user having to check the Redis connection first.
- Use a more international selection of letters when validating usernames (in
userstate.go
). - Look into writing samples for:
- Look into supporting HTTP basic auth, but only for some paths (see scoreserver).