zarina2311/trakker

Web app to track and organize users' job search progress. Written in React.js, Node.js, Express.js, and PostgreSQL

Trakker

Trakker is a full-stack web app to track job search. Users can organize their application submissions, interviews and overall job hunt progress.

You can find the project here: Trakker.

The project is written in React.js, Node.js, Express.js and PostgreSQL.

Features include:

• Sign Up form via Auth0
• Log In form via Auth0
• Log Out via Auth0
• Personal board
• Add new column
• Create name for new column
• Add new card
• Create name for new card
• Drag and drop cards
• Delete column
• Delete card
• Undo new card input

Setup Instructions:

Database

createdb trakker
run trakker.sql on postgres

Express

cd express-server
npm install
npm start

React

cd react-client
npm install
npm start

Once both servers are running (Express on port 3001 and React on port 3000), open http://localhost:3000 to view the app in the browser.

trakker's Issues

[Security] Make sure user_id in API request matches authenticated user

Currently it appears from the code that anyone can view any data by just guessing a user id. There should be code to make sure that the user_id matches the logged-in user id.

trakker/express-server/index.js

Line 22 in 3e7d46c

user_id: req.params.user_id,

Improve pg-promise error handling

This structure is confusing because you're using the .many etc helpers but also ignoring their errors blindly. If you don't know if there will be results use the more permissive methods in pg-promise. If you really want to catch the error, you should strictly check what kind of error it is also.

trakker/express-server/trakker-database.js

Lines 3 to 9 in 3e7d46c

	const ignoreEmptyResultsError = (err) => {
	if (err.code !== 0) {
	throw new Error(err);
	} else {
	return [];
	}
	};

Include `/columns` in columns routes

It's impossible to guess your API paths since it's missing a resource noun after the user. I would add /columns to all routes related to them.

trakker/express-server/index.js

Line 33 in 3e7d46c

api.post("/user/:user_id", (req, res) => {

Add proper error handling for empty state (?)

If this is an expected "empty state" please make that more clear. If it's really an error, the server should respond with an error.

trakker/express-server/index.js

Lines 25 to 29 in 3e7d46c

	.catch((err) => {
	// TODO figure out which status to send based on the err object
	console.log("there was an error: \n\n", err);
	res.send([]);
	})

Need for `redirect`

What is this needed for?

trakker/react-client/src/api-fetcher.js

Line 30 in a708ee9

redirect: "follow",