acm-udayton / acm-udayton/ACM-Meeting-Records

[FEATURE] Add JWT authorization requirement to all relevant backend endpoints

Offen
#159 0 Kommentare 0 Reaktionen 0 zugewiesene Personen Auf GitHub ansehen
enhancement
Vorherrschende Sprache
Python
Sterne
7
Forks
2
Ø Merge
4 T. 23 Std.
Gemergte PRs (30 T.)
2

Beschreibung

## Feature Description

For each new /api/v1 endpoint that should require authentication, add the decorator(s) to enforce those policies.

---

## Acceptance Criteria & Solution Requirements
*To close this issue, the following must be met (can be finalized in the comments):*
- [ ] 1. Application runs as expected with the new feature integrated seamlessly.
- [ ] 2. Code quality metrics are maintained, and linting has been considered in development.
- [ ] 3. Testing metrics are maintained, and tests have been updated/added wherever relevant during development.
- [ ] 4. Documentation has been updated to reflect the changes made during development.
- [ ] 5. All endpoints have been considered for login requirement.
- [ ] 6. A new decorator has been added that requires that the logged-in user is also an admin. Use an `is_admin` boolean JWT key.
- [ ] 7. All endpoints have been considered for admin requirement.

Beitragsleitfaden

Beitragsleitfaden öffnen

Rechercherichtung

Find the backend API endpoints in the codebase, likely in a directory like 'api/v1/'. Identify which endpoints need JWT authentication and admin checks. Look for existing decorators for authentication. The new admin decorator should check for an 'is_admin' boolean in the JWT. Update tests to verify protected endpoints reject unauthorized requests and that admin endpoints require the admin flag.

Vom Indexierungsmodell aus dem Issue-Text verfasst.

Bewertung

Tech-Stack
python
Bereich
api, authentication, authorization, backend
Issue-Typ
Feature
Schwierigkeit
4/5
Geschätzter Aufwand
3-5 Tage
Aktivitätsstatus
Ruhig
Klarheit
Größtenteils klar
Anfängerfreundlichkeit
45/100

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.