In this challenge, you will implement an additional GET route for an API backend.

This is a technical task, but we also want to see how you write code to be read by others. Please keep this in mind as you go.

This repo is indicative of the style and some of the tools used at Userfront. If you have any questions while doing the challenge, please ask!

• Install Node.js, version 12 or higher
• Install Postgres, version 9.6 or higher

1. Set up a local postgres server (default is port 5432) and create a database named api_challenge.

psql
create database api_challenge;

2. Fork this repo and install dependencies. (how to fork)

cd api-challenge
npm install

3. Run the test suite

npm run test:watch

Following the examples of the /users/self and /roles endpoints (see below), create 1 additional route:

GET /users/{userId}

• This route should return information about the given user. The response should be in the same format as the /users/self route.
• Only admin users should be able to read from this route. All other requests should receive a 401 unauthorized response. This is the same as for the /roles route.

You can add to the test snippets for this endpoint in /test/user.crud.spec.js.

You do not need to add any additional tests, but you may do so if you find it helpful.

Once the above tests are implemented and passing, the challenge is considered to be solved.

The API currently has 2 routes:

Returns information about the user making the request. See more about this route in the following files:

• /test/user.crud.spec.js
• /config/routes/user.routes.js

Returns a list of roles, provided that the requester is an admin. See more about this route in the following files:

• /test/role.crud.spec.js
• /config/routes/role.routes.js

The database has 3 tables. These are automatically created when the test suite runs:

Authentication is done with a JSON Web Token (JWT) included in the authorization header of each request:

{
  headers: {
    authorization: "Bearer eyJhbG..."
  }
}

The server reads this token and verifies it using the RSA_PUBLIC_KEY found in /config/env/test.env.

For testing, you can generate a valid token using the user.generateAccessToken() method. (See /test/role.crud.spec.js for an example)

You can find a list of modules in package.json. A short description of each is below: