alexa-skillz / alexa-interview-overflow

Gathering user-generated interview questions and answers for our Alexa interview skill(s). Mongo, Express, Node. (Authors: Team)
https://alexa-interview-overflow.herokuapp.com/
MIT License
2 stars 1 forks source link

Fix authorization for PUT and DELETE routes #68

Open jonathanheemstra opened 7 years ago

jonathanheemstra commented 7 years ago

our authorization currently is required in order to PUT and DELETE but we don't do any validation that confirms a user has the authority to PUT or DELETE.

b-d-johnson commented 7 years ago

https://www.npmjs.com/package/acl

b-d-johnson commented 7 years ago

Or perhaps: https://www.npmjs.com/package/mustbe or https://www.npmjs.com/package/authenticat or Passport