mdn / mdn/express-locallibrary-tutorial
Authentication system
Open
Nobody has claimed this yet.
help wanted
- Dominant language
- JavaScript
- Stars
- 1.3k
- Forks
- 844
- Avg merge
- 4d 11h
- Merged PRs (30d)
- 2
Description
Currently, the express-locallibrary application has no user authentication or session management. This means:
- Anyone can view the library catalog (intended), but anyone can also create, modify, or delete books, and book instances without identification (unintended).
- Users cannot sign up or sign in; there is no concept of a "current user" in the application.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by mapping the Express application's book and book-instance create, modify, and delete paths, along with how requests currently identify users. Define the signup, signin, session, and authorization behavior before changing the application. Done means users can authenticate and only identified, authorized users can modify catalog records while catalog viewing remains public.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- express, javascript, nodejs
- Domain
- authentication, backend
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 28/100