suvelocity / authentication-challenge-template Goto Github PK

GET path: /api/v1/users, description: Get users DB (admin only),

Request template: header {Authorization: "Bearer -access token-"}
Server Responses: status 200, body: {USERS: [...[{email, name, password, isAdmin}]} | status 401 "Refresh Token Required" | status 403 "Invalid Refresh Token".

does this get a refresh token or access?

if all the endpoints are not in one file, you cant use arrays for users and information, because both /users endpoints and /api endpoints need them.
one solution is using fs and .json files, but this creates a problem with reseting for tests and adding the users - it seem to mess with the way bcrypt creates a hash

It is written in the readme that login entry point gets in the body the object : {user,email,password}, but in the test it recives: {name,email,password}.
Makes some of the tests to fail, not fun

currently only the email of the user is a unique field.
so if each item in the INFORMATION array for all the users is represented by the name of the user, users with the same name will get their information mixed up.

POST path: "/users/logout", description: Logout Session.

Request template: body: {token: -refresh token-"}
server responses: status 200 "User Logged Out Successfully" | status 400 "Refresh Token Required" | status 400 "Invalid Refresh Token".

Are you sure both errors should be status 400? in other endpoints its 401 for "Refresh Token Required"

"USERS [...{email, user, password, isAdmin},{}...]"

it should be "[...{email, name, password, isAdmin},{}...]"

Hi, after running "npm i" in both the client and the root directory,
The react command "npm start" shows the following error:

The client cannot be run at all.
The challenge still works but the client experience is missing.