jacksonludwig / cse-416-sporadic-api Goto Github PK

for retrieveUser, check if the user matches token and only send back full data if it does, otherwise don't send sensitive info

just need to copy paste what is done in confirm email

we will need update user to set profile picture, add subs, update last login, etc

currently needed so we can at least fetch all banned users

subscribe and unsubscribe are almost identical. One route can be used for both, or at least the function could be broken down into more modular pieces.

something like sort=top

need to add a check for if the user is a mod on the platform they are trying to add a quiz to

• should we just use update user for this?

• disable account in cognito
• set isgloballybanned to true
• add globallyBanned to Sporadic.Permissions

In order to ensure unique platform names we must enforce case insensitivity to ensure duplicates are not generated. Furthermore, when any GET requests for a platform are retrieved they should also be converted into a case insensitive standard to obtain a valid platform.

remove logic from routers to keep them from getting too long

upon starting make score NULL and timeSubmitted be the time started
That way we only access this data for a specific quiz

currently 500 errors will be returned if cognito gives a 400, this can be fixed with an extra try-catch.

when a user starts a quiz, we need to save the time they started. The quizzesTaken field could be updated to include timestamps. In the submitQuiz route, we will check the timestamp.

• Submit quiz route
• Timer validation -- where does this go?

Create an API request to pull a collection of quiz cards.

Here is the general flow of pulling:

1. Get user's list of subscriptions in a list and randomize the order
2. Iterate through the list and grab the newest quiz in the current subscription platform
3. Add to the returning collection
4. Move to the next until reaching 10 cards or if we've run out of possible quizzes to add

check if user banned -> check if user is mod

this will only be used by admins, so maybe we can restrict it to them just cause

at some point we need to figure out how to deal with profile pics/banners and hook up with S3

• add owner as subscriber and moderator when creating a platform
• when unsubscribing, remove user from moderator list too

since we're using _id from mongo, mongo will throw an error if an invalid object id is provided to the confirm email route.

the given ID should be validated before sending it to mongo so we don't throw a 500 error, and instead throw a 400.

Create the routes for handling an upvote/downvote. Correspondingly make ts file that will apply the corresponding change to the quiz within the database.

Once it is complete add Postman examples for us to test with.