Sprint 2 General Outline

[m4v15]

Only display your own todos, so see nothing if not logged in

• Change DB Schema:

  • add user table
  • add user_id to todo table

• registration form at GET / home route:

  • username, password (confirm password)

• POST /register

  • add user to the database after hashing password
  • redirect to the GET /login

• login form at GET /login:

  • username password
  • make request to POST /login:

• POST /login

  • query the database to find the (hashed) password of the username entered
  • compare hashed password with entered password
  • if true:
    • set cookie 'userid' - JWT containing user_id
    • redirect to GET /todo-list

• GET /todo-list:

  • validate cookie, do not through if no cookie/invalid
  • fetch request for exisiting todos if they exist at GET /onload:

• GET /onload

  • validate JWT of the cookie from the request, get the user_id from it
  • query the database using the user_id to get that users todods
  • send back and array of the todos of that user
  • form to add todos

• POST /add

  • validate JWT of the cookie from the request, get the user_id from it
  • query the database using the user_id to add to the todo to the database

• GET /logout

  • delete cookie set cookie 'userid' = null