• Pass "account_number", and "signature" in the body request.
• Check if nonce is signed by the "account_number" and matches the "signature".
• Generate JWT if yes.

Breakdown

• Implement GET /profile/:username endpoint: #20
• Implement PATCH /profile endpoint: #21

Breakdown

• Implement POST /profile_link
• Implement GET /profile_link/:id
• Implement GET /profile_link/:id
• Implement PATCH /profile_link/:id
• Implement DELETE /profile_link/:id

As a user, I wish to be able to revoke refresh tokens so that if refresh tokens get leaked, the attacker wone be able to generate new access tokens.

Implementation details:

• Add an extra field on refreshToken payload called tokenId
• Create a table called BlacklistedRefreshToken.
• Add the revoked refreshTokens to that table.
• While the user tries to generate accessToken using refreshToken, verify its not blacklisted.

Requirement: Must be authenticated.

As a user, I wish to be able to add addresses of different chains, so that I can receive donations.

Options to choose from:

https://www.mongodb.com/
https://docs.deta.sh/docs/home
https://docs.planetscale.com/

Base endpoint: xyz.com/api/v1

/users/:account_number
GET
returns the account number and nonce associated with that account number.

/login
POST
Parameters: account_number, signature
returns JWT or error message.

/addresses
CRUD
Parameter: token, address, metadata (optional)
Requires: Authentication
returns success or error message.

/profile/:username
GET, PATCH
Parameters: username (requires to be gold tier for patch), description, avatar_url

/social_profile
CRUD
Requires: Authentication
Parameters: social_media, username

/profile_links
CRUD
Requires: Authentication
Parameter: title, URL

/token
GET
returns uuid, name, symbol, logo_url, requires_metadata, token_info_url

return the links, social profiles, and addresses associated with the user.

Wireframes:

ref:
https://www.toptal.com/ethereum/one-click-login-flows-a-metamask-tutorial
https://www.topcoder.com/thrive/articles/authentication-and-authorization-in-express-js-api-using-jwt
https://www.section.io/engineering-education/how-to-build-authentication-api-with-jwt-token-in-nodejs/
https://www.simplilearn.com/tutorials/nodejs-tutorial/jwt-authentication
https://www.sohamkamani.com/nodejs/jwt-authentication/
https://www.digitalocean.com/community/tutorials/nodejs-jwt-expressjs

• Host default avatars in incremental order on amazon s3 bucket. Format: /profile/id.png
• Assign random avatars to the user profile.

• Only let users with GOLD and DIAMOND tier update username.
• Validate the uniqueness of the username.
• Allow any user update description and avatar_url.

Requires: account_number

returns: account_number and nonce.

As a user, I wish to be able to create social links so that i can add my social media handles in my account.

User Story

As a user,
I want to be able to upgrade my subscription type to "GOLD"
so that I can update my username.