tfd-ed / sarpheab-api Goto Github PK

User forget password feature

im interested in making a new feature to handle users forgetting passwords

To- Do

• allow the user to send requests and forget their password with their email
• Use sending blue SMTP to send an email to the user with a magic url+token
• Generate specific token parame and save it as temporary to DB for comparison when user's requests with Token + URL that we send to email
• the URL request forget password will expire in one time request and 1 hour.
• Maybe need to modify user DB model to add a new object isRequesResetPassword: { isReset : true, token_url: String, req_date: new Date() }
• And I would like to request .env temple as well 😅.

Current Issue

This project lack internal API testing tool making it hard for advanced API call with complexy query.

To-do

• Add Swagger module
• Create a new route to display Swagger-UI (api/docs)

Resources

• Express Swagger UI

@tfd-ed Please help review my proposal

Issue

When we want to access or modify specific resources bases on MongoDB ID, the server treat it as valid MongoDB ID type without checking which is high risk for system crash.

To-do

• Create a middleware to validate MongoDB ID
• Middleware is flexible to accept param name

Current Issue

There is no readme in the project

To-do

• Create a README.md in root directory
• Write README on how to setup project

Issue

There is no pagination when calling API for all tweets or all users which make it hard for client to render all at once.

To-do

• Install Mongoose Paginate V2 to model
• Implement pagination on routes

Issue

The current system doesn't allow image upload for tweets.

To-do

• Create a route to attach an image to tweet
• Add image field to tweetModel
• Store on local storage

Reference

Use multer for image uploading