Full-Stack · Quick Reference

Lesson 28 — Project 5: REST API + Auth Cheat Sheet

Full-Stack

In one line: A fully authenticated backend: register/login with bcrypt+JWT, and CRUD routes scoped to the logged-in user.

Build Checklist

1POST /register — hash + save

2POST /login — verify + sign JWT

3protect middleware on all CRUD routes

4Resources linked to userId

5Users only touch their own data

No token

401, not a crash

Password field

Never in API responses

Secrets

.env, never committed