shimupan / lineupx

A Free Lineup Database for a Variety of Games
https://lineupx.net
MIT License
20 stars 0 forks source link

Backend user route changes #328

Closed shimupan closed 1 month ago

shimupan commented 1 month ago

Is your feature request related to a problem? Please describe. <-- A clear and concise description of what the problem is. -->

Describe the solution you'd like <-- A clear and concise description of what you want to happen. -->

{
    "_id": "65a70095dc44d590069824e2",
    "ProfilePicture": "https://res.cloudinary.com/ddwqqjmyo/image/upload/v1719199975/profile_pictures/qavuabgavrfv4z017gon.jpg",
    "role": "admin",
    "username": "kagiriez",
    "Verified": true,
    "likes": [],
    "dislikes": [],
    "saved": [
        "65fde52f674cd62852a54d56",
        "664e11194747eec764c2d8e2",
        "6663b2bf289679b8ef6e6cd3",
        "666088fbbea00eaf175c9cbc"
    ],
    "comments": [
        {
            "text": "very cool lineup!",
            "_id": "65c6966b2e0dc09b91ed0991",
            "createdAt": "2024-02-09T21:17:31.330Z"
        },
        {
            "text": "skibidi toilet",
            "_id": "65c69a532e0dc09b91ed0a54",
            "createdAt": "2024-02-09T21:34:11.409Z"
        },
        {
            "text": "rizzly bear",
            "_id": "65c6a1012e0dc09b91ed0aec",
            "createdAt": "2024-02-09T22:02:41.071Z"
        },
        {
            "text": "peak",
            "_id": "65cbfd9b1c4cec9d17ad0041",
            "createdAt": "2024-02-13T23:39:07.919Z"
        },
        {
            "text": "very cool lineup!",
            "_id": "65f602f1674cd62852a4d271",
            "createdAt": "2024-03-16T20:37:05.528Z"
        },
        {
            "text": "Wow!",
            "_id": "65fde542674cd62852a55032",
            "createdAt": "2024-03-22T20:08:34.051Z"
        },
        {
            "text": "yea",
            "_id": "663ed14a4747eec764bf186e",
            "createdAt": "2024-05-11T02:00:42.653Z"
        },
        {
            "text": "a",
            "_id": "664e5b344747eec764c2ea91",
            "createdAt": "2024-05-22T20:53:08.238Z"
        },
        {
            "text": "insane",
            "_id": "6652712dbea00eaf175b5537",
            "createdAt": "2024-05-25T23:15:57.238Z"
        },
        {
            "text": "nice\n",
            "_id": "6691a822fe50834533224092",
            "createdAt": "2024-07-12T22:03:14.245Z"
        },
        {
            "text": "W",
            "_id": "6696cee05180067a636cc50b",
            "createdAt": "2024-07-16T19:49:52.420Z"
        },
        {
            "text": "nice",
            "_id": "6696d0f75180067a636d98ea",
            "createdAt": "2024-07-16T19:58:47.486Z"
        },
        {
            "text": "WW",
            "_id": "669b3fbaa8b61853db2b2977",
            "createdAt": "2024-07-20T04:40:26.944Z"
        },
        {
            "text": "cool",
            "_id": "66d923fdcabb8781a91f417a",
            "createdAt": "2024-09-05T03:22:37.539Z"
        },
        {
            "text": "add",
            "_id": "66d9241dcabb8781a91f4c06",
            "createdAt": "2024-09-05T03:23:09.387Z"
        }
    ],
    "followers": [
        "65a70055dc44d590069824da",
        "668b1c1a27c2fa4d2160d05c",
        "669dd9c5a8b61853db2c3415",
        "6665d7d2289679b8ef73a480"
    ],
    "__v": 153,
    "following": [
        "65a70055dc44d590069824da"
    ]
}

This is a sample response of the request that is returned when you visit kagiri's profile at https://www.lineupx.net/user/kagiriez.

Of course this is a very big security issue since we are returning the hashed password among other private information. For this issue, make new routes that will only return generic non private information for users that aren't the account owner.