Skip to content

Week 5 Lesson Notes - Beau Barth#22

Open
bbarth86 wants to merge 1 commit intopce-uw-jscript400:masterfrom
bbarth86:master
Open

Week 5 Lesson Notes - Beau Barth#22
bbarth86 wants to merge 1 commit intopce-uw-jscript400:masterfrom
bbarth86:master

Conversation

@bbarth86
Copy link

No description provided.

* **Your Answer:**

---Whenever `npm run reset-db` is ran, the function `reset()` within `db/seed.js` file is executed. This function first calls the `deleteMany()` method of the `Party` collection, which eliminates any existing documents from the collection. Then the `create()` method is called and two initial documents are created. This is a useful method to reset/reformat to a "default" or "foundation" instance of your collection.

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍

* **Your Answer:**

--- Assuming that various validations are performed against the username and password. For user name, system may check for format, type, etc. or for whether or not the user name already exists. For password, may check for format, type, length requirements, etc. If all validations are successful, a user/password record/collection is created.

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good! also checks if similar records already exist and uses encryption to save to db

* **Your Answer:**

--- You want to be careful about identifying specific root cause for authentication failures as this type of information actually helps people attempting to hack, spoof, etc a given login or user identify where they need to adjust their attempt at credentials.

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍

* **Your Answer:**

---I think this is same as above, in that authentication refers to verification of the user credentials (name/password) as a means to identify the user, and authorization refering to verification of the user's capabilities, access rights, etc.

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants