collabcodetech / training-auth

CollabCode Training

An Open Source online course platform.

Getting Started

1. Fork this repo and clone in your machine;

2. Change directory to collabcodetraining-api-auth where you cloned it;

3. At the terminal, run:

npm install
cp example.env .env
npm run dev

4. Open up localhost:5000 and start using it

Prerequisites

• Npm
• Node (>=10.16.3)

Running the tests

npm test

Running MongoDB with docker

Prerequisites

• Docker (>=1.13.1)

Run the following command on the project root directory:

docker-compose up -d

Built With

• Restify

Contributing

Please read CONTRIBUTING.md for details on our code of conduct, and the process for submitting pull requests to us.

Authors

• Joviane Jardim - @joviane
• Marco Bruno - @marcobrunobr

See also the list of contributors who participated in this project.

License

This project is licensed under the MPL 2.0 License - see the LICENSE file for details

Acknowledgments

Thanks to all members of CollabCode's community for the support! We love you!

training-auth's Issues

Refresh token

Is your feature request related to a problem? Please describe.
No
Describe the solution you'd like
Route to refresh token

Describe alternatives you've considered
No

Additional context
No

CORS

Is your feature request related to a problem? Please describe.
No

Describe the solution you'd like
No

Describe alternatives you've considered
Configuration CORS

Additional context
No

Builder test

Is your feature request related to a problem? Please describe.
No

Describe the solution you'd like
Create builder test

Describe alternatives you've considered
No

Additional context
No

Route login

Is your feature request related to a problem? Please describe.
No

Describe the solution you'd like
Create route /api/login

Describe alternatives you've considered
No

Additional context
No

Docker MongoDB

Is your feature request related to a problem? Please describe.
No

Describe the solution you'd like
NO

Describe alternatives you've considered
Add the docker with mongodb

Additional context
No

User password getting hashed more than once on pre save hook

Describe the bug
User password is getting hashed every time the model is saved, because of pre save hook.
Hashing the hashed password can result in a lost account.

It's happening because there are no checks on User.pre("save") hook, even though there is only one route that triggers this operation at the moment, it's probable that there'll be more in the future.

To Reproduce
Steps to reproduce the behavior:

1. Copy paste the code
2. Make sure you have bcryptjs installed

const bcrypt = require("bcryptjs");

async function main() {
  const password = "hello world!";

  const hashed_once = await bcrypt.hash(password, 10);
  const hashed_twice = await bcrypt.hash(hashed_once, 10);

  const equal_hashed_once = await bcrypt.compare(password, hashed_once);
  console.log("equal_hashed_once =>", equal_hashed_once); // true

  const equal_hashed_twice = await bcrypt.compare(password, hashed_twice);
  console.log("equal_hashed_twice =>", equal_hashed_twice); // false
}
main();

Expected behavior
User password should be hashed only once when it has been modified.

Restify Errro

Is your feature request related to a problem? Please describe.
No

Describe the solution you'd like
No

Describe alternatives you've considered
Add the lib restify-error

Additional context
NO

Cryptographically signed cookie

Is your feature request related to a problem? Please describe.
No

Describe the solution you'd like
Add cryptographically signed cookie in key jwt

Describe alternatives you've considered
No
Additional context
No

Mochawesome

Is your feature request related to a problem? Please describe.
No

Describe the solution you'd like
Configuration mochawesome

Describe alternatives you've considered
No

Additional context
No

Remove log request mocha

Is your feature request related to a problem? Please describe.
No

Describe the solution you'd like
Remove the log's request in mocha

Describe alternatives you've considered
No

Additional context
No

Message success login

Is your feature request related to a problem? Please describe.
No

Describe the solution you'd like
Add message success for login

Describe alternatives you've considered
No

Additional context
No

Frameworks for TDD

Is your feature request related to a problem? Please describe.
No

Describe the solution you'd like
No

Describe alternatives you've considered
Install frameworks for TDD:

• supertest;
• mock;
• chai.

Additional context
No

Validation save user

Is your feature request related to a problem? Please describe.
No

Describe the solution you'd like
Create validations:

• Verify fields, name; email and password;
• Registered email;
• Valid email;
• Password with 8 chars.

Describe alternatives you've considered
No

Additional context
No

Error login

Is your feature request related to a problem? Please describe.
No

Describe the solution you'd like
Return field name error in login route

Describe alternatives you've considered
No

Additional context
No

Route forgot

Is your feature request related to a problem? Please describe.
No.

Describe the solution you'd like
Create a route to forgot where the frontend with react will send an email and our API will use the email API to send an email with a link to the user reset a new password.

Describe alternatives you've considered
Maybe generate a token with an expiration date.

Additional context
No.

Send JWT cookie

Is your feature request related to a problem? Please describe.
No

Describe the solution you'd like
Send JWT Cookie

Describe alternatives you've considered
No

Additional context
No

Add restify-cors-middleware

Is your feature request related to a problem? Please describe.
No

Describe the solution you'd like
No

Describe alternatives you've considered
Add the lib restify-cors-middleware

Additional context
No

Test README.md

Is your feature request related to a problem? Please describe.
No

Describe the solution you'd like
Add test in README.md

Describe alternatives you've considered
No

Additional context
No

Connection MongoDB

Is your feature request related to a problem? Please describe.
No

Describe the solution you'd like
No

Describe alternatives you've considered
Create connection as the MongoDB

Additional context
No

Duplicate JWT on response

Route Signup

Is your feature request related to a problem? Please describe.
No

Describe the solution you'd like
No

Describe alternatives you've considered
Create route signup with the fields:
Name;
Email;
Password.

Additional context
No