A convenient hub to apply for and post jobs effectively, decreasing the amount of time wasted that would normally be lost to the notoriously exhausting process of job hunting.
Right now, any registered use in any role can change the details of any user. User information should only be able to be edited by the user themselves or an admin.
Right now, we are returning full debug messages and a 500 status code when there is a internal server error, even in release builds. Generally, this should be handled more gracefully by returning a different status code and a user readable message
We need to apply access control for all of the application endpoints appropriately. Right now, our application endpoints are wide open.
For example, submitted applications should only be viewable/editable by the candidate that made the application, recruiters of the company to which the application was submitted, or Admins.
Right now, the access control for our auth endpoints is (at least in theory) secure, but some of our endpoints could either be renamed or more open to accommodate different use cases