Full-Stack React Projects - Second Edition

Protecting user routes

We will define two auth controller methods called requireSignin and hasAuthorization, both of which will be added to the user route declarations that need to be protected with authentication and authorization.

The read, update, and delete routes in user.routes.js need to be updated as follows.

mern-skeleton/server/routes/user.routes.js:

import authCtrl from '../controllers/auth.controller'...router.route('/api/users/:userId')    .get(authCtrl.requireSignin, userCtrl.read)    .put(authCtrl.requireSignin, authCtrl.hasAuthorization,      userCtrl.update)    .delete(authCtrl.requireSignin, authCtrl.hasAuthorization,      userCtrl.remove)...

The route to read a user's information only needs authentication verification, whereas the ...