thevahidal
commented
2 years ago @pouriamolaee, There's a couple of small issue with authentication, fix them first and we'll move on to the next part:
- Register endpoint does not return token. (It requires user to first register and then login to obtain a token.)
- Never return password in responses, even the hashed one.
Other issues:
- Make sure to gitignore your sqlite db.
- Don't allow duplicate symbol names for coins. (symbol field should be unique)
Now that we have a base application with a simple CRUD, it's time to added user authentication. For now let's keep it simple, we just need to be able to authenticated using 4 endpoints:
After this, let's make all non-GET-endpoints to be "Authenticated only".