qhantom / express-mongo-typescript-boilerplate Goto Github PK

It'd be cool to have password reset functionality built in.

For people who do not put a reverse proxy in front of their app, it's useful to implement SSL / TLS support.

How do I get started initially? I would need an admin user account to start creating users in the first place. From what I saw, no default user is created, is it? It would be helpful to either have a fixed default user account (like admin:admin) and document it accordingly or even make it configurable.

It might be helpful to either introduce some notion of "owning" an entity or make rights more fine-grained.

For instance, to access the GET /v1/users/:id endpoint, a user requires the USER_READ right. However, this only distinguishes between being able to either read all users or none at all. Instead, it might be useful to be able to access that endpoint (same for DELETE, PUT, ...) for oneself only, but not for others, i.e. read, edit, delete, ... my own account only.