Authenticate playback route (and related routes)

[MikeCroall]

This will avoid anyone being able to 'skip' a song, and to delete queued songs.

[OhmGeek]

That's a good idea, how do you think we should approach this? We could hook into GAuth, and only allow particular people who have Google accounts, or we could use the Aidan's (new) website to authenticate, or is there another simpler way? Potentially generating a key?

[MikeCroall]

The simplest way would be to use basic-auth, which would mean those who have permission could have the same or their own login credentials, without relying on other services. Having said that, GAuth could work nicely with the JCR managed google accounts, instead of having to remember extra credentials.

[OhmGeek]

Actually that'll work better, as it just makes everything so much simpler - GAuth will probably be good for the main JCR site, but probably not needed for a smaller jukebox