typescript-postgres-auth-example
typescript-postgres-auth-example copied to clipboard
mikesparr
Example Express Node API written in Typescript with Postgres and Redis backend and RBAC / ABAC authorization
Many applications may use another identity provider (IdP) for login, and the app should trust the signed authentication from the provider, and create a user token/session accordingly. The 3rd party...
Often a user is a member of one or more groups, and may have permissions specific to that group that differs from others, or access to resources owned by that...
For preventative measures, when the system is accessed with a token we should check the device and if a mismatch from the logged-in device, notify the user. * unsure if...
Just for peace of mind and to minimize staff abuse, the system should notify the primary user when someone "login as" their ID.
Many organizations centralize around one or more types of document, or data, but need the ability to monitor edits on a field-by-field basis. Similar to a CRM with customizable contacts,...
To make the system flexible for any node type, we need a way to allow CRUD operations to add/edit nodes and relations. ## Proposed route structure After the controllers are...
If we are going to allow dynamic nodes in graph, and dynamic document types in #53 then we need ability to define and manage schemas and versioning. (go add type...
Similar to validating user input via HTTP `POST` and `PUT`, we need to validate querystring parameters. Research and figure out a way to use class validator perhaps with generic Dto...
Ideally this is handled at API gateway layer but may consider adding nonce and check.
Although most i18n is configured client side, if an application may store different versions of content based on language, we could add a reference implementation of handling language-specific content (likely...