Auth implementation - Githubissues

pieza / restapp

MIT License

1 stars 1 forks source link

Auth implementation #29

Closed tr0b closed 3 years ago

tr0b commented 3 years ago

Part One - Initial EnsureAuth implementation, Usuario model refactoring

54adeb3

Added Initial ensureAuthenticated Passport middleware method

573f9b6

Added sanitation (trim) to UsuarioSchema properties
Added required constraints for Usuario fields
Added uniqueness constraint to codigo consecutivo and nick
Part Two - Initial Local Strategy

f684e6a

Added new Passport LocalStrategy for User Authentication.

518f4e4

Added Initial Authentication Routes for User Sign In and Sign Up

4a25ad8

Added dependencies to server file (passport, cookieParser) _ Added authentication route to list of routes

Part Three - Server, Route Uppercase, auth files rename bugfix

db89a96

Renamed route and service class file name to Uppercase variant in order to fix errors from not finding missing files in server and route files
Renamed auth route to auth route local, in order to avoid obtaining the server routes regex to include this file, thus crashing the server

3ad0837

Fixed authroute filename bug, causing server to crash due to not finding authroute file

Part Four - UsuarioSchema toJSON Method bugfix

b734081

Refactored UsuarioSchema toJSON method to an anonymous function, in order to successfully use this property

Part Five - Local Strategy, argon2 verify method bug fixes

825af31

fixed erroneous name for usernameField, causing localStrategy to fail, due to not searching users by nickname
Fixed inverted params in argon2 verify method
Fixed argon's verify promise not throwing proper success/error responses due to not validating if passwords match

Part Six - Adding Auth and Passport to Server

07f7784
Added auth routes and passport route to main server file

Part Seven - Auth Sigh Up, Sign In Endpoints bug fixes

cbae5f3

Fixed Sign Up route not saving new user correctly due to receiving an undefined object
Fixed login route not throwing errors correctly, when faced with wrong password/username
Changed error status code for login to 401, when related to invalid credentials

Part Eight, Logout route, Express Sessions Cookie functionality__

545a17c

Added initial Usuario GET logout endpoint

8af0953

Refactored ensureAuthenticated method to send a 401 unauthorized response

a72178f

Restricted endpoint usage through ensureAuth middleware, for generic endpoints

c7b29a2

Added Express Sessions in order to manage sessions in server
Removed deprecated Cookie Parser dependency. It is no longer needed by Express sessions in order to store cookies in browser
also fixed order of sessions /passport initialization (express-session > pass.initialize > pass.session )

Part Nine, Fixing Merge Conflicts

e9a31e8

Merged branch with main