Citizen must be authorized to view the contents of the profile page

Also, when we hit 'GET /api/v1/citizen/profile/:id'
the id parameter in the req will course a lot of problems, its suppose to be a the citizen._id right?
but i can't get the citizen details until this code runs const citizen = await Citizens.findOne({ _id: req.params.id });
And that code only runs on a GET request to /api/v1/citizen/profile/:id which requires a param of the citizen id,whc i dont have yet

so i suggest you change the controller url from /api/v1/citizen/profile/:id to /api/v1/citizen/profile
And
const citizen = await Citizens.findOne({ _id: req.params.id });
to something like :
const citizen= await Citizens.findById(req.user, '-password'); res.json({ citizen});

Originally posted by @sleekLancelot in #13 (comment)

In the register controller(/api/v1/citizen/register), after registration and you 'citizen.save()', can you make it return a token just like it does in the login controller? The way it is now it seems, one would have to login again after registering.

you can make it something like:

await citizen.save();
const payload = {
       id: citizen._id,
     };
     const token = jwt.sign(payload, mySecrete, { expiresIn: "1hr" });

     res.json({
       msg: "you are now logged in",
       token,
     });

Users should be able to upload and remove profile avatar on their dashboard through the profile settings

A complete set of citizen fingerprints should be collected and properly saved in the database

Schema design of the citizen model

Afternoon Ben,please make the citizen model look like this

register({
                firstName,
                lastName,
                email,
                phone,
                placeOfBirth,
                residentialAddress,
                dateOfBirth,
                nationality,
                passportNum,
                nationalIdentificationNumber,
                password,
                password2
            })

The following details should be saved in the database of a newly registered citizen on the platform
Fullname, Scanned passport pages, place of birth, duration of stay in Nigeria, Age, Nationality and Finger print

integrate repo with codacy.com

password in the database can not be comprised, citizen password and data must be well protected