This project is given to you for the benefit of using a previously implemented JWT authentication structure for you.
To get started be sure to follow the regular steps:
yarn
to install all the dependencies from the package.json file.mongod
to start your mongo instance.yarn start
to run nodemon over the server file.
The three endpoints that are included are:
Take a tour of this repository. Get familiar with the chosen file structure. Notice we have a few directories here. controllers
models
routes
and services
. You can think of each of those this way.
controllers
- the code that interfaces between our routes and
- Takes a
username
andpassword
in the request body and creates a user to save to the DB.
- Requires
username
andpassword
to be sent up to the request body. If the user exists, and the password is correct the result should be a shiny JWT.
{
"token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6InJ5YW5Acnlhbi5jb20iLCJpYXQiOjE1MTYyOTQ1NzMsImV4cCI6MTUxNjI5ODE3M30.Uv4Sr-wNIRQx_P977NG6HGCktuDHsAdu3o_sjqRP71k"
}
- This will be the token you need to send up to
[GET] /api/users
- Requires a valid JWT token to be sent in the
Authorization
header. An example could look like this:
headers: {
Authorization: "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VybmFtZSI6InJ5YW5Acnlhbi5jb20iLCJpYXQiOjE1MTYyOTQ1NzMsImV4cCI6MTUxNjI5ODE3M30.Uv4Sr-wNIRQx_P977NG6HGCktuDHsAdu3o_sjqRP71k"
}
- Notice you'll be sending this up to the server on the header. Eventually we could write a mechanism into our server to accept this via header, query string or req.body.
- If your token is valid, you'll get a list of the sent back that are in the system.