Creating a user via console is not allowed to login.
Furthermore, the edit modal of the user,shows the private fields as a json.

It should be used the reserved bb_code property of the returned json to explicitly indicate when the unauthorized (http 401) error is raised because the session token is not recognized

We need a new set of APIs to allow administrators to update assets.
The first API will address the JSON Asset

When an object is delete within a collection, a http code 200 is sent but the reply body is empty.
It should contain at least
{
"result":"ok",
"http_code":200
}

The response of a HEAD request on an asset should return its metadata

Performance should improve by using the connection pool

A POST on an already existing resource should append data to it, like an incremental edit

If the content-type header is set to application/json and there is no content at all when a POST is executed on the /logout end point, an error is returned stating that no content has been posted, even if the endpoint does not need any content.

if baasbox is behind a reverse proxy to expose the baasbox API via ssl, the asset file upload functionality in the admin console does not work

edit application name doesn't change value of input filed after [save]

• doesn't show up in debug session, nor was able to reproduce

Now this API is only for admins

If the body is empty, or in the post request the Content-Type Header is missing, a null pointer exception is raised in the controllers.

The menu button (top right) when viewing the console on smartphones is not enabled.

Current version of the admin console is not optimized.
There are unused js/css files, and the remaining ones are not minified

And vibration.

It must be implemented a way to reset a forgotten password by a user

Now baasbox uses the admin credential to perform some task like for example to sign up a new user.
If the admin changes his/her password, his/her must change the password in the .conf file too.
Very bad.
Same thing for the special internal user "baasbox".

there is an API GET /document/:RID, but since the RID is deprecated it should be nice to have a GET /document/:id API as well

Step to reproduce:

• Upload an asset with an ñ character in the name
• Download the asset and ñ in the name of the file is replaced with a -

A user might want to temporarily disable push notifications. You need a sort of method which is the opposite of

PUT /push/device/:os/:deviceId

See attachment.

Margherita was loaded via the console
The others were loaded via curl
All images are png

It would be useful to get from the backend a resized image is this is stored as a fileasset.

On Heroku the dependency for commons-io must be must be explicitly declared in buil.scala file

The server should returns a "Location" header in reply to a POST submission

In both cases the API should return the same data structure, including access token and information about the user: username, create_at, etc.

Run 0.5.4 locally.
Login with success
Reload the page
It asks you to login again

After the execution of the test suite, in the admin console, in the dashboard screen the number of assets is 3, but in the Assets screen there are no asset at all.