The "Messy" Social Media API Challenge

Welcome! Your job is to fix a broken and unfinished API.

A developer left this project in a mess. We know there are at least two big security bugs, and it's missing all the social features.

Your mission is to:

1. Find and fix the bugs.
2. Build the missing features from scratch.

---

HOW TO START

1. Install the packages: npm install

2. Create a file named ".env" in the main folder.

3. Copy this into your new .env file: MONGO_URI=mongodb://localhost:27017/social-app-hackathon JWT_SECRET=putanysupersecretkeyhere

4. Make sure your local MongoDB is running.

5. Start the server: npm run dev

---

WHAT YOU HAVE (THE EXISTING CODE)

• Models:

  • User.js (username, password, bio)

• Routes (in the 'routes' folder):

  • POST /api/register (Works)
  • POST /api/login (Has a bug!)
  • GET /api/users (Works)
  • PUT /api/users/:id (Has a bug!)