nahsiloh / login_authorisation_backend

Files you need to create

Create a .env and ensure that the .env file is in .gitignore.

{
  JWT_SECRET_KEY=<Generate your own>
}

Getting started

To start server

npm start

To start server in development mode

npm run start:dev

To run the tests

npm test

To build the app

npm run build

login_authorisation_backend's Issues

Features to include

• The user can sign up as a new user. They are expected to see an email in their inbox.
• The user can click the link in the email to verify the account.
• The user can log in only after their email address is verified.
• The user cannot create another account with the same email from an existing account.
• A hacker if committing Man-in-the-middle attacks cannot know the plain-text password.
• The database owner (You) cannot store plaintext password or SHA256-hashed password in your DB.
• Fields in the input object must be checked if they are required and if they have the right data types.
• Full installation instruction must be available via readme.md. Indorse validators need to read these to run and test your code.
• Test coverage is ideal