API for key management

[andreareginato]

This is something really important when we'll integrate the physical provisioning system

Think at an API to get all tokens.

• list of created access token
• creation of access token with choice of devices and location
• refresh resources (to easily load new devices when added in locations)

For each of it we need to have those info:

• list of resources (uri+name)
• list of devices selected (uri+name)
• list of locations selected (uri+name)
• application (uri+name)

Remember that list of resources is different from list of devices, as in list of resources we add devices and all devices inside of a specific location. The application then, can retrieve the tokens that belongs only to the application itself. Only from the people service, accessing to the DB, we can have the complete list.

Think a lot at the flow related to the physical device. We must give a way to those devices to automatically get an access token for a single resource. Probably some internal specific functionalities checking serial and secret code for every device, in combination with physical nodes. Check out Cosm.