Skip to content

Files

Latest commit

624e4c6 · Apr 19, 2020

History

History
65 lines (55 loc) · 1.61 KB

README.md

File metadata and controls

65 lines (55 loc) · 1.61 KB

BootCamper-Backend-API

Back-end bootcamp API for directory website, allow user to list all bootcamps in the database, search bootcamp and more

Tools

  • Javascript(ES6)
  • Node.JS
  • Express.Js
  • MongoDB
  • Mongoose Middleware
  • Postman
  • Geocoder
  • Mapquest
  • Nodemailer
  • Mailtrap
  • Digital Ocean
  • PM2

Functionality

Bootcamps

  • List all bootcamps in the database
  • Search bootcamps by radius from zipcode
  • Upload a photo for bootcamp
  • Update bootcamps
  • Delete Bootcamp
  • Calculate the average cost of all courses for a bootcamp
  • Calculate the average rating from the reviews for a bootcamp

Courses

  • List all courses for bootcamp
  • List all courses in general
  • Get single course in Bootcamp
  • Create new course in Bootcamp
  • Delete course in Bootcamp

Reviews

  • List all reviews for a bootcamp
  • List all reviews in general
  • Get a single review
  • Create a review
  • Update review
  • Delete review

Users & Authentication

  • Authentication will be ton using JWT/cookies
  • User registration
  • User login
  • Get user
  • Password reset (lost password)
  • Update user info
  • User CRUD
  • Users can only be made admin by updating the database field manually

Security

  • Encrypt passwords and reset tokens
  • Prevent cross site scripting - XSS
  • Prevent NoSQL injections
  • Add a rate limit for requests of 100 requests per 10 minutes
  • Protect against http param polution
  • Add headers for security (helmet)
  • Use cors to make API public (for now)