Authentication API

This API was developed in conjunction with a mandatory assignment in NodeJS.

Specifications

Uses MongoDB to store user information.
Uses JWT as a user token to access private routes.
Hashing of passwords is done with Bcrypt.
Send confirmation email after registration.
Implements reset password functionallty.
Both confirmation and reset mail is send with Nodemailer.

Documentation

Auth routes

/user
- @GET
- Description: Get user data
- Access: Private
- Request: JWT token in header as auth-token.
- Response: User object
/signin
- @POST
- Access: Public
- Request: Email and password.
- Response: User object, JWT token, Message.

User routes

/
- @POST
- Description: Register user
- Access: Public
- Request: User object.
- Response: Message.
/forgot
- @POST
- Description: Send email with instructions to reset password.
- Access: Public.
- Request: Email.
- Repsonse: Message.
/resend-confirmation
- @POST
- Description: Send extra confirmation email after registration.
- Access: Public.
- Request: Email.
- Repsonse: Message.
/
- @PATCH
- Description: Update user (Firstname and lastname).
- Access: Private.
- Request: _id, firstname, lastname.
- Response: Message.
/reset
- @PATCH
- Description: Updates user password.
- Access: Public.
- Request: JWT token, password.
- Response: Message.
/confirm
- @PATCH
- Description: Updates isConfirmed user field.
- Access: Public
- Request: JWT token.
- Response: Message.
/delete
- @DELETE
- Description: Delete user
- Access: Private
- Request: _id.
- Response: Message.