haydenwade/plateo

A web app that brings on conversation by connecting others via license plate numbers

Plateo is an application where users can follow and create conversations based on license plates, hence the name. Have you ever wondered if the person on the side of the road needed help or if they were okay? Or did you want to let the person ahead of you know that their gas cap was open, or they have a burnt out taillight? Or tell the cute guy or girl next to you to pull over for an ice cream at the next McDonalds? Not only do these conversations in the app allow people to communicate on the road but also allow local authorities to monitor driving behavior. Users could report or comment on a license plate saying the person's driving was bad or spot a drunk driver or someone texting and driving. I built this application using Angular (4+), Bootstrap, Auth0, Node.js, Express, and Mongo DB.

Plateo

A web app that brings on conversation by connecting others via license plate numbers.

Tech Stack This app uses the MEAN stack.

Run me by using:
npm install
bower install
node server
navigate to localhost:3000

plateo's Issues

Cannot Reload View Without Losing Current View (Angular Routing)

When you choose a plate from the Find plate list or the My Plates list, it displays the plate you selected, but if you were to reload the page it is lost. To fix this I believe a special route needs to be created for this "plate view" so when it reloads it can do a read from the api to get the specified plate.

Desired routing:
http://localhost:3000/#/plate/{plate_id}
ex: http://localhost:3000/#/plate/23

Questions getting started, comment below.

Please work off of the Hacktoberfest branch and make all PR to that branch, thanks!

Home doesn't return you to landing page.

Home button in navbar at top, could be something simple with angular routing

Help setting up Karma, Jasmine, Travis MEAN Stack

Questions/issues:

1. Is my karma.conf.js setup correctly?
2. Travis CI build is failing (is my travis.yml setup correctly?)
3. Not sure how to handle the calls to mongoDB -> assume I will have to mock this out in my tests or setup Travis to run build on my development server; Any thoughts on this?

Background info:
I just started to add tests to my project. My plan is to have e2e tests and unit tests for the api; unit tests for the UI.

Here is what I have done so far:
Added Karma and Jasmine
Created karma.conf.js
Created .travis.yml
Created tests directory to hold both api and ui tests.
Added one test to ping api

Project Directory structure:
server.js - api
app/ - middlewares and routes for api
public/ - UI using AngularJS
tests/ - directory to hold all tests
tests/api - where my e2e tests for api will go
tests/ui - where my unit tests for the ui will go

Please work off of the AATests branch and make all PR to that branch, thanks!

Login with bad credentials Error: POST http://localhost:3000/login 401 (Unauthorized)

When invalid credentials are entered at login it returns this error in the debug console even though I handle the error. Is this expected? If not how do you go about fixing it...

Please work off of the Hacktoberfest branch and make all PR to that branch, thanks!

Challenge: Hack into my application (Plateo) and retrieve my password!

I am curious how vulnerable my app is, I believe I have found a vulnerability but thought it would be festive to have a challenge for Hacktoberfest.

My latest code is in the hacktoberfest branch so dig in there to see the inner workings or challenge yourself more and try to do it without looking at the back end code.

Live app is running here: http://bit.ly/2duQKj8

Create a PR to the hacktoberfest branch with an updated Readme stating what my password is and where you found the vulnerability.

PLEASE BE AWARE THAT YOUR PASSWORD YOU USE TO CREATE AN ACCOUNT ON MY APP IS VULNERABLE (if that hasn't crossed your mind yet)
If you accidentally used a password you didn't want to use and would like me to delete it from the database please comment below)

P.S. As the month goes on I will give suggestions/clues to help crack into my db. Check back here for clues.

UPDATE:
See PR #29 for the first vulnerability. I believe there is one more vulnerability that allows a non registered user to post information (comment and add plates)

Missing Assets Directory

TODO:

1. Create assets directory under public (public/assets)
2. Move all files except index.html and main.css to assets folder
3. Change code to point at correct location of files (should only be in the index.html file, one reference in home.html)

Please make pull request to Hacktoberfest branch thanks!

Challenge: Hack into my application Plateo!

I am curious how vulnerable my app is, I believe I have found several vulnerabilities but thought it would be festive to have a challenge for Hacktoberfest.

My latest code is in the hacktoberfest branch so dig in there to see the inner workings or challenge yourself more and try to do it without looking at the back end code.

Live app is running here: http://bit.ly/2duQKj8

Create a PR to the hacktoberfest branch with an updated Readme stating what what the vulnerability is and where you found the vulnerability/potential fix.

PLEASE BE AWARE THAT YOUR PASSWORD YOU USE TO CREATE AN ACCOUNT ON MY APP IS VULNERABLE (if that hasn't crossed your mind yet)
If you accidentally used a password you didn't want to use and would like me to delete it from the database please comment below)

P.S. As the month goes on I will give suggestions/clues to help crack into my db. Check back here for clues.

PREVIOUSLY:
See PR #29 for the first vulnerability that was found. I believe there is one more vulnerability that allows a non registered user to post information (comment and add plates).

Update:
See if you can retrieve password for username: bobbyj and create a PR to the hacktoberfest branch with password

Validation for Registration Page is not correct

This is when a user does not satisfy the requirements that is needed to create an account
ex: password is too short, must contain etc. (might have to look at server to find out what the requirements are)

does work for some validation rules.

Please work off of the Hacktoberfest branch and make all PR to that branch, thanks!

Missing Favicon

simple but memorable

Fix UI - look into 500 server error, $http.post(), check x access token

Check services
Only fails on posts and gets that require authentication by passing session token.

Missing Logo/Branding

Need something catchy for the landing page! Let me see what you got.

Create Gulp Build Task to create dist folder and content

I want to build (uglify, etc) only my UI which is located in the public directory.

Please work off of the Hacktoberfest branch and make all PR to that branch, thanks!

On page reload AuthenticationFactory.user gets set to undefined

AuthenticationFactory.user gets set on login (login.js line 25) and then in auth.factory.js line 8 gets set again on page reload. I can't seem to track down what happens to it. Not sure if I am not retrieving it from localStorage correctly (seemed to work for other data I store in localStorage)

Steps to reproduce: (after you fork the repo)

1. npm install
2. bower install
3. node server
4. navigate to localhost:3000
5. register a user (firstname: test, lastname: test, password: test123, email: [email protected], username:test)
6. Go to My Plates tab (look at terminal session you will see something close to the following)
   
7. Refresh the page (you will see this in the terminal)
   

Please work off of the Hacktoberfest branch and make all PR to that branch, thanks!

Help setting up Karma, Jasmine, Travis

Questions/issues:

1. Is my karma.conf.js setup correctly?
2. Travis CI build is failing (is my travis.yml setup correctly?)
3. Not sure how to handle the calls to mongoDB -> assume I will have to mock this out in my tests or setup Travis to run build on my development server; Any thoughts on this?

Background info:
I just started to add tests to my project. My plan is to have e2e tests and unit tests for the api; unit tests for the UI.

Here is what I have done so far:
Added Karma and Jasmine
Created karma.conf.js
Created .travis.yml
Created tests directory to hold both api and ui tests.

Project Directory structure:
server.js - api
app/ - middlewares and routes for api
public/ - UI using AngularJS
tests/ - directory to hold all tests
tests/api - where my e2e tests for api will go
tests/ui - where my unit tests for the ui will go

I am pretty confident in my ability to write unit tests for angular modules, so that shouldn't be a problem.

Please work off of the AATests branch and make all PR to that branch, thanks!