sergiovp / tfg-organizeandfly Goto Github PK

I have to try to store it in the backend. The problem is that in the app, the token is stored in the browser. If anyone could copy this token, it could be used to delete the user profile, for example.

The token stores the id and email of the user. It means that if another user get your token, he could delete your profile or set it.

I'll try to manage the token in the back and impement another route to check its datas which will sent to the front.

As a user I must be able to delete my profile in the app.

As a user I must be able to modify my data in the app.

As a user I must be able to signin in the app.

A JWT is generated when an user logs in or up in the app, this token stores all user information (id, email and pass).
The token will be sent to the front so there we'll have the user information.

The problem is when an user modifies the profile because token payload information will not be updated.

Maybe the best solution is to generate a new token when an user changes any data.

For now, I'm not using env variables, which could be dangerous.

This issue is to remember me that I have to use it.

As a user I must be able to get my profile data in the app.

I need to encrypt too the new password when it is changed by an user.

As a user I must be able to register in the app.