4.4 KiB
WDI-PANTHALASSA
Title: Sessions & Authentication w06d04
Type: Homework
Duration: "3:00"
Creator:
Original creators: WDI-Archer & WDI-Bowie
Adapted by: Kristyn Bryan
Course: WDIr Panthalassa
Competencies: Javascript
Prerequisites: Javascript
Homework
Handling Sessions in Node
You're going to create a small application to continue using the new knowledge that you just obtained today. Create a new express server and npm install and require everything you need (install express, express-sessions, body-parser, ejs, and mongoose,etc.).
Also remember to touch a .gitignore file and ignore node_modules.
Commit 1
"Commit 1: Created a new app and included the npm packages that I need."
Do the following with this server:
Create 2 pages: a welcome page and a form page.
The form should ask the user for a name. When the user submits the form, save it in sessions and make the welcome page display: "Welcome, name". Refresh the welcome page, does the name persist?
Commit 2
"Commit 2: Created a form page and a welcome page."
Lets now use a database with stored information to populate our session.
Connect to mongo using mongoose.
Commit 3
"Commit 3: Connected mongo using mongoose."
Create a mongoose schema for a user. Be sure to register it into a model. The schema should have a name (string) and color (also string).
Commit 4
"Commit 4: Created a schema and model for user."
Change the form route for setting the user's name. Instead of setting it in sessions, create a new user in your user collection. Add an input for the person's favorite color and store that along with the user's name.
Commit 5
"Commit 5: New form element for color and saving that information with the user."
Create a new page for a login form. This form should take only a user's name. When a user submits the form, find their document in the database and set, in sessions, their name and color.
Commit 6
"Commit 6: Created a new page for login. Create a session and display their information."
When a user goes to the welcome page, if they do not have a name set in sessions, redirect them to the login. If they have a name, render the welcome page with the normal welcome message and change the background to their color.
Commit 7
"Commit 7: The user has a custom page or is redirected to the login if their name isn't set to the session. "
- Install and reqire
bcrypt - Update your login page to accept both a username and password.
- Encrypt the password using bcrypt.
- Reminder on how to hash a password string using bcrypt:
req.session.password = bcrypt.hashSync(req.params.password, bcrypt.genSaltSync(10));
Commit 8
"Commit 8: Added a request for a password and hashed the password using bcrypt. "
- Write the login function that will take the username and password and confirm that the password matches.
Commit 9
"Commit 9: Wrote code to identify matching passwords. "
Write the code necessary so that the flow of your app is as followed:
- When a user goes to: '/', they are provided with TWO things:
- A form to login (if they are an existing user in your database).
- You can either provide them with a form on
/for them to sign up as a new user, or a link tag, that takes them to '/new' that displays a form to sign up as a new user.
- If they sign in successfully, take them to the welcome page that displays their personal information (
/welcome/:username). - If they are a new user, after they successfully sign up, take them to the welcome page with their personal information(
/welcome/:username). - If they don't sign in successfully, redirect them to the sign in page.
Commit 10
"Commit 10: Created the routes appropriate for logged in users. Redirected accordingly. "
Bonus: Make sure that a user can't access another user's page.
Commit 11
"Commit 11: Only the user can access their personal page."
Bonus: Add a route to log a user out
- Add a delete route / logout.
- Install
method-override - Add a form/button on the home page that links to that
deleteroute
Commit 12
"Commit 12: The user can log out of their session."