Prevent mutations based on ctx.user (AKA the JWT) - Githubissues

hashtune / Hashtune-Marketplace-Client

Hashtune's Marketplace Client Repository

https://hashtune.co

0 stars 0 forks source link

Prevent mutations based on ctx.user (AKA the JWT) #100

Open eemmiillyy opened 2 years ago

eemmiillyy commented 2 years ago

What: We just added JWTs to determine whether users are able to make certain mutations

Why: We should not let users who are not approve call createNFT mutations. We should not let users who do not have JWTs make bids on auctions/sales

AC:

In the create NFT mutation get the user public key from the session and see if that user has approvedCreator to true
In the bid/auction mutation get the user public key from the session and see if that user exists in our db or not
Create API tests