Development

.gitignore

@@ -1 +1,115 @@
-.DS_Store
+# Logs
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+lerna-debug.log*
+
+# Diagnostic reports (https://nodejs.org/api/report.html)
+report.[0-9]*.[0-9]*.[0-9]*.[0-9]*.json
+
+# Runtime data
+pids
+*.pid
+*.seed
+*.pid.lock
+
+# Directory for instrumented libs generated by jscoverage/JSCover
+lib-cov
+
+# Coverage directory used by tools like istanbul
+coverage
+*.lcov
+
+# nyc test coverage
+.nyc_output
+
+# Grunt intermediate storage (https://gruntjs.com/creating-plugins#storing-task-files)
+.grunt
+
+# Bower dependency directory (https://bower.io/)
+bower_components
+
+# node-waf configuration
+.lock-wscript
+
+# Compiled binary addons (https://nodejs.org/api/addons.html)
+build/Release
+
+# Dependency directories
+node_modules/
+jspm_packages/
+
+# Snowpack dependency directory (https://snowpack.dev/)
+web_modules/
+
+# TypeScript cache
+*.tsbuildinfo
+
+# Optional npm cache directory
+.npm
+
+# Optional eslint cache
+.eslintcache
+
+# Microbundle cache
+.rpt2_cache/
+.rts2_cache_cjs/
+.rts2_cache_es/
+.rts2_cache_umd/
+
+# Optional REPL history
+.node_repl_history
+
+# Output of 'npm pack'
+*.tgz
+
+# Yarn Integrity file
+.yarn-integrity
+
+# dotenv environment variables file
+.env
+.env.test
+
+# parcel-bundler cache (https://parceljs.org/)
+.cache
+.parcel-cache
+
+# Next.js build output
+.next
+
+# Nuxt.js build / generate output
+.nuxt
+dist
+
+# Gatsby files
+.cache/
+# Comment in the public line in if your project uses Gatsby and not Next.js
+# https://nextjs.org/blog/next-9-1#public-directory-support
+# public
+
+# vuepress build output
+.vuepress/dist
+
+# Serverless directories
+.serverless/
+
+# FuseBox cache
+.fusebox/
+
+# DynamoDB Local files
+.dynamodb/
+
+# TernJS port file
+.tern-port
+
+# Stores VSCode versions used for testing VSCode extensions
+.vscode-test
+
+# yarn v2
+
+.yarn/cache
+.yarn/unplugged
+.yarn/build-state.yml
+.pnp.*

API/server.js

@@ -0,0 +1,39 @@
+const express = require("express");
+const helmet = require("helmet");
+const cors = require("cors");
+
+const authRouter = require("../users/auth-router.js");
+const notesRouter = require("../notes/notes-router.js");
+const usersRouter = require("../users/users-router.js");
+const restricted = require("../middleware/restricted-middleware.js");
+
+const server = express();
+
+server.use(helmet());
+server.use(express.json());
+server.use(cors());
+
+server.use("/api/auth", authRouter);
+server.use("/api/users", restricted, usersRouter);
+server.use("/api/notes", notesRouter);
+
+server.get("/", (req, res) => {
+  res.status(200).json({ api: "up" });
+});
+
+module.exports = server;
+
+//Optional: if database has role, below is checkRole middleware, it could be added to userRouter after restricted
+function checkRole(role) {
+  return (req, res, next) => {
+    if (
+      req.decodedToken &&
+      req.decodedToken.role &&
+      req.decodedToken.role.toLowerCase() === admin
+    ) {
+      next();
+    } else {
+      res.status(403).json({ you: "Shall not pass!" });
+    }
+  };
+}

API/server.spec.js

@@ -0,0 +1,31 @@
+const request = require("supertest");
+
+const server = require("./server.js");
+
+describe("server.js", function() {
+  describe("GET /", function() {
+    it("should return 200 OK", function() {
+      return request(server) //return makes it async
+        .get("/")
+        .then(res => {
+          expect(res.status).toBe(200);
+        });
+    });
+
+    it("should return JSON", function() {
+      return request(server)
+        .get("/")
+        .then(res => {
+          expect(res.type).toMatch(/json/i);
+        });
+    });
+
+    it('should respond with {api: "up"}', function() {
+      return request(server)
+        .get("/")
+        .then(res => {
+          expect(res.body.api).toBe("up");
+        });
+    });
+  });
+});