Skip to content

Griffiths -- W5 Lesson Notes#14

Open
crgriffiths wants to merge 2 commits intopce-uw-jscript400:masterfrom
crgriffiths:master
Open

Griffiths -- W5 Lesson Notes#14
crgriffiths wants to merge 2 commits intopce-uw-jscript400:masterfrom
crgriffiths:master

Conversation

@crgriffiths
Copy link

No description provided.


* **Your Answer:**
* **Your Answer:** You would pass credentials to the server, the server would authenticate the request by validating the user/password combination. If successful, the server would return an auth token that the user would use with any additional requests so the server knows that the request should be accepted for any routes requiring you to be logged in.

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍


* **Your Answer:**
* **Your Answer:** It is a more logical expression of the action we are doing, not just the data said route would return or what that data represents.

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Correct, this is more "user friendly"


* **Your Answer:**
* **Your Answer:** Because the action is actually validated two fields, not just one. It is entirely possible the user entered the correct password, but entered their username incorrectly. The error message should point out that there was an issue with the combination of credentials used.

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, specifically to make it more difficult for hackers.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants