RESTful Web API Design with Node.js - Second Edition

Authorization

So far, the contacts data service relied on a statically created admin user to access the data. It is time to change that by introducing an API that would provide simple user management capability.

We've already defined AuthUser. Now we will create a module that will take care of creating, updating, and deleting users. The name of the module file will be admin.js, and like the other modules in our application, it will be located in the modules directory:

exports.remove = function (model, _username, response) {   console.log('Deleting user: '+ _username);   model.findOne({username: _username}, function(error, data) {     if (error) {       console.log(error);       if (response != null) {         response.writeHead(500,           {'Content-Type' ...