GraphQL Server Intermediate Tutorial - Boilerplate with Typescript, PostgreSQL, and Redis
video description
Date: 2022-03-14
Related videos
Comments and reviews: 3
Ivan
About forgot password locking: the way you did it is kinda dumb, because what if someone requested forgot password on someone elses email and keeps doing it like 3-5 times a day just for fun? The owner of the account would have to go to his email, follow the link, change his password and login again every single time someone does -forgot password request-, because of the lock.
What you ACTUALY need to do is logout user from once he FOLLOWED the link to change his password but didnt send a new one, than its okay to logout and lock account untill the user changes his password. OR if user followed the link AND changed the password, than we could just logout(without locking obviously) and send him to login page/login right away depending on frontend setup.
reply
About forgot password locking: the way you did it is kinda dumb, because what if someone requested forgot password on someone elses email and keeps doing it like 3-5 times a day just for fun? The owner of the account would have to go to his email, follow the link, change his password and login again every single time someone does -forgot password request-, because of the lock.
What you ACTUALY need to do is logout user from once he FOLLOWED the link to change his password but didnt send a new one, than its okay to logout and lock account untill the user changes his password. OR if user followed the link AND changed the password, than we could just logout(without locking obviously) and send him to login page/login right away depending on frontend setup.
reply
Anssi
I love it. Good demystifying discussion on options and choices, touches many important features of a real world app in a way that the daily job actually is like. Theres quite a learning curve here and it would have taken very much longer to figure out all that alone
reply
I love it. Good demystifying discussion on options and choices, touches many important features of a real world app in a way that the daily job actually is like. Theres quite a learning curve here and it would have taken very much longer to figure out all that alone
reply
Steven
re: -50 mins -startServer-
What I do is wrap the -startServer- call in the index file with -if(module.parent == null)-, this way the code will only execute if you type -node index.js-. I wonder if ts will complain about -module-.
reply
re: -50 mins -startServer-
What I do is wrap the -startServer- call in the index file with -if(module.parent == null)-, this way the code will only execute if you type -node index.js-. I wonder if ts will complain about -module-.
reply
Add a review, comment
Other channel videos
