Get user loans from NLB website

[cliffchew84]

Allow a way for users to get their loaned NLB books from their NLB accounts. With the current NLB API endpoints, such a flow probably requires the user to provide their login details, and then we have a way to web scrape their loaned books from their NLB website.

This might be a useful feature for users, as they may want a way to track their loaned books on NLB, but shouldn't be priority feature. Just a random inclusion as I thought about it.

[kiritowu]

AFAIK, none of the public API provide information on user specific information like Loans, Reservation etc.

Reverse engineering from NLB's official website doesnt seems feasible too because:

1. NLB's website uses Session Based Authentication after OAuth 2.0 process. This means a session Id ASP.NET_SessionId is stored in user cookies and NLB's server for authentication purpose. Everytime the session expired, the session Id is invalid and the user needs to sign in again.
2. Current login flow from NLB website dont seems to be easily reverse engineered. Sign-In link is dynamically generated with client-id. Scanning of QR from Singpass or NLB's App will automatically redirect user to NLB's website instead of our webapp. Also the cookie returned is http-only that cannot be accessed with JS. More research is needed on how this can be safely implemented.

An alternative option that I can propose, is to add feature for user to mark a certain book as loaned by the user. Since we can technically retrieve the loan date for a particular item, this can then satisfy the requirement for user to be notified of loaned books and their expiry date.