Perfect that should do as a phase 1 implementation

A follow up question, is it possible to give every user who has access to jsreport access to everything (so without having to give access to each person for each file individually) with the authentication plugin enabled.
Or perhaps to assign a user to a certain tag as a way to function as a user group?

Sounds great, ill dig into it!

Thank you for your reply. The solution im leaning towards right now is to let users use the same username/password as our main web application and write a custom plugin for verifying the users credentials.
Does this sound feasible to you?
Do you know if anything like this has been done before?

Hi, we're planning on using jsreport with token based authentication for both the API and the UI. I understand how it's supposed to work for the API side, but im not sure if it's possible to skip filling in your username/password when redirected through our web-application to JSReport.

Some background: our application has 2 sides the consumer side is where we use the users bearer token to retrieve reports from JSReport. However there's also an admin side where admins are allowed to modify/create reports. We also want to make it possible for our admins to be redirected to JSReport without logging in, is this possible?