Building on prior explorations with CRUD and Image Uploads, this demo adds functionality for user authentication via Auth0 and the Express OpenID Connect library. The application uses MongoDB to persist data and to define the owner of each record. Accordingly, our Prisma schema includes models for both users and cats.
Backend endpoints include the following logic:
- Only authenticated users can create, update, or delete cat records.
- Each cat record is associated with the user who created it.
- Users can only modify or delete their own cat records.
- All users can view all cat records, regardless of ownership.
Frontend interfaces reflect these options by revealing and concealing UI elements depending on the user's logged-in state, and their relationship to the data.
The pattern being used here assumes that the backend enforces the rules, while the frontend communicates those rules to the user.
To setup this project, we can follow the same process as for the two previous demos on which this repository is based:
- To setup MongoDB, Prisma, and Vercel Blob, follow the same setup process as defined in the Image Uploads demo.
- To Setup Auth0, follow the setup process defined in the Vault demo.