MVP - Part 2

[giuroperto]

CONTENT

• [ ] Create info content for materials view and about us

ROUTES

AUTH ROUTES

• [x] Create folder
• [x] Create file
• [x] get /login
• [ ] get /signup
• [ ] post /signup
• [x] post /login router.post("/login", passport.authenticate("local", { successRedirect: "/", failureRedirect: "/login", failureFlash: true, passReqToCallback: true, }));
• [x] require bcrypt
• [x] set bcryptSalt = 10
• [x] SIGNUP check Username and Password
• [x] findOne(username) -> if null, create new user (const salt = bcrypt.genSaltSync(bcryptSalt); const hashWord = bcrypt.hashSync(password, salt);), else, render error
• [x] LOGIN check Username and Password after checking if the user does exist, check if password matches: if (bcrypt.compareSync(thePassword, user.password)) { // Save the login in the session! req.session.currentUser = user;
• [x] Check if all fields were filled in both LOGIN and SIGNUP
• [x] Check if the username is unique when creating an account SIGNUP
• [ ] Add error messages -> flash install and require in app.js
• [x] Create logout route router.get("/logout", (req, res) => { req.logout(); res.redirect("/login"); });
• [ ] Require ensurelogin in routes
• [ ] Add the route such as the middleware will go between the route and the callback: router.get("/private-page", ensureLogin.ensureLoggedIn(), (req, res) => { res.render("private", { user: req.user }); });
• [ ] Add jQuery check strength password https://www.npmjs.com/package/zxcvbn
• [ ] Add re-captcha in the signup https://www.npmjs.com/package/express-recaptcha

AUTH - LOGIN

• [ ] Add ensurelogin for all routes that are not HOME

  AUTH - ROLES

• [ ] Add types of roles and which route it should see

CSS

• [ ] Do basic CSS/Bootstrap

SIGNUP

• [x] Create model User
• [x] Create Form
• [x] Create route that will handle this infos + validations if (username === "" || password === "") { res.render("auth/signup", { message: "Indicate a username and a password to sign up" }); return; }
• [ ] To show error message in the view `{{#if message}}
  {{ message }}

  {{/if}}`

• [x] To make sure username is unique User.findOne({ "username": username }) .then(user => { if (user !== null) { res.render("auth/signup", { message: "The username already exists!" }); return; } // ADD HERE THE ACTION TO SAVE IN DB }) .catch(error => { next(error); })
• [x] To save in the DB // User model const User = require("../models/user"); // BCrypt to encrypt passwords const bcrypt = require("bcrypt"); const bcryptSalt = 10; ... router.post("/signup", (req, res, next) => { const username = req.body.username; const password = req.body.password; const salt = bcrypt.genSaltSync(bcryptSalt); const hashPass = bcrypt.hashSync(password, salt); User.create({ username, password: hashPass }) .then(() => { res.redirect("/"); }) .catch(error => { console.log(error); }) });

CONFIGS

• [x] Sessions: app.use(session({ //secret - used to sign the session ID cookie (required) secret: "basic-auth-secret", resave: true, saveUninitialized: true, (?)// cookie: obj for the session ID cookie -> set maxAge attribute which configures the expiration date of (?)//the cookie (in milliseconds) (?)cookie: { maxAge: 60000 }, // store: sets the session store instance -> new instance of connect-mongo to store the session info in our DB store: new MongoStore({ mongooseConnection: mongoose.connection, ttl: 24 * 60 * 60 // 1 day }) }));
• [x] Passport: passport.serializeUser((user, cb) => { cb(null, user._id); });

passport.deserializeUser((id, cb) => { User.findById(id, (err, user) => { if (err) { return cb(err); } cb(null, user); }); });

app.use(flash()); passport.use(new LocalStrategy({ passReqToCallback: true }, (req, username, password, next) => { User.findOne({ username }, (err, user) => { if (err) { return next(err); } if (!user) { return next(null, false, { message: "Incorrect username" }); } if (!bcrypt.compareSync(password, user.password)) { return next(null, false, { message: "Incorrect password" }); }

return next(null, user); }); }));

app.use(passport.initialize()); app.use(passport.session());

[giuroperto]

flash messages are not working

[giuroperto]

add map in client's details

[giuroperto]

Delete button user list + employees list

[giuroperto]

Add picture home internal + home users

[giuroperto]

Add validation fields such as CNPJ, email, phone, coordinates...

[giuroperto]

Add admin CRUD -> internal home only for admins

[giuroperto]

FLASH MESSAGES? URL DEFAULT? SELECT OPTIONS? LOAD LAT/LONG FORMS?