Fix #37 - Authenticated User Routes

[ademars94]

Fix #37: Pull code for POST '/users' out from authenticed routes to allow new users to sign up without already being users (this is more realistic). GET '/users' is still protected. Change content-type to Content-Type in server.js

WebStorm trimmed some whitespace too.

[chris-sev]

I see the value in this, but I think that this would better be solved by creating an auth section of the API to handle registrations.

The users API will still need the authenticated POST /users route for admins that want to create users from the dashboard.

I'd recommend creating unauthenticated routes in a new app/routes/api.auth.js or app/routes/auth.js :

/api/auth/login
/api/auth/register

[ademars94]

I think admin users may be outside of the scope of this chapter. Also, breaking the routes out into different files may cause confusion for some of those following along in the book. Is the book updated alongside the repo? If it is, I think you're right about creating a separate file for registrations. Otherwise I think that might make the code in the repo too different from the code in the book for beginners. What do you think?

[chris-sev]

Yea I want to keep the code in the repo the same as the book. This is a great exercise to go beyond the book curriculum, but you're right; it's better for learning to keep it the way it is.