Skip to content
pre-defined operationGET - ReadPOST - Createto resources
request: method + endpoint + httpheader: accept, authorization, connectionbody: JSON datamethod and status codeheaderbody
expressrouting
when update a document, strange fields (which are not in model) will be ignored.how to catch errors when fields do not exist, fields are locked (like _id)
new request — express router handlernew request — middleware do something — express router handlerHeader: create a folder named ‘middleware’put a function in it (req,res,next)require that function in according router (routers/user.js)
pre save() actioncan’t use findByIdAndUpdate, must convert Object to Associative Array
public accessible by anyoneprivate, only for logged in users
header partuser data partthis part can be decoded using base64 decoderandom stringDONT LOSE THE WHOLE JWT TOKENexpire: usenot expireboth expiration date save in JWT token
Task Manager (dev)Task Manager (production)setup Authorization at parent (Category Level)choose “Inherit auth from parent” from Authorizationno longer need authorization headerif not use, choose, “no authorization”
to simulate real life usage
passwordtokens array
youhoc
- Pages
8. Rest API
Basic
Representational State Transfer - Application Programming Interface
HTTP Request
HTTP Request is made-of:
Response Data is made-of:
Download and Install Postman
Endpoint Setup Route
Use:
Return Status COde
Mongoose Queries
GET
POST
PATCH
Multiple Express Router
Separate Router File for seperate resources
Middleware
Sections:
Express Middleware
New Request:
Middleware function
Authentication Middleware:
Mongoose Middleware
Properties of JavaScript objects can also be accessed or set using a bracket notation (for more details see ). Objects are sometimes called associative arrays, since each property is associated with a string value that can be used to access it. So, for example, you could access the properties of the myCar object as follows:
Assign a static function to Schema
JWT Web Token
JWT includes 3 part:
JWT should:
Postman Advanced
Create enviroments
Create env var
Use env var as {{env_var}}
Use or Not Use Authorization
Use PM JS to generate login user token and pass it onto env var
Hiding Private Data
Never send back private data in JSON
res.send() will JSON.stringlify any object into JSON
Want to print your doc?
This is not the way.
This is not the way.
Try clicking the ⋯ next to your doc name or using a keyboard shortcut (
CtrlP
) instead.