svegalopez / hermit-server Goto Github PK

see demo in guides.

• http endpoints (3)
• middleware
• one of the routes is protected with the middleware
• add extra layer of security by creating a UserLogin model and using cookies.

• Only admins are allowed to call this route
• Generate gql types
• Test
• Rename UserRoles to UserRole

only admins are allowed to call this route

• Include Roles in response
• Write tests
• Fix missing coverage for unrelated code

Create the endpoints necessary for user management:

• update a user and its roles

• list users and its roles

• create a role

• list roles

• add a role to a list of users

Currently, the query.users field is open to whoever is authenticated.
Make it so that only admins can access this field.