Giters

FortechRomania / node-starter-extended

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Authorize middleware is missleading

alexnm opened this issue · comments

commented

  1. Authorize middleware should be renamed, it does not authorize, it simply checks that the userId is in the request body. This functionality should not be part of the standard starter

  2. The routes which actually need authorization should only rely on validateToken (which can be renamed into authorize actually)