5.5 KiB
id | title | challengeType | forumTopicId | dashedName |
---|---|---|---|---|
587d824a367417b2b2512c45 | Anonymous Message Board | 4 | 301568 | anonymous-message-board |
--description--
Build a full stack JavaScript app that is functionally similar to this: https://anonymous-message-board.freecodecamp.rocks/.
Working on this project will involve you writing your code using one of the following methods:
- Clone this GitHub repo and complete your project locally.
- Use our repl.it starter project to complete your project.
- Use a site builder of your choice to complete the project. Be sure to incorporate all the files from our GitHub repo.
When you are done, make sure a working demo of your project is hosted somewhere public. Then submit the URL to it in the Solution Link
field. Optionally, also submit a link to your projects source code in the GitHub Link
field.
--instructions--
- Set
NODE_ENV
to test without quotes when ready to write tests and DB to your databases connection string (in.env
) - Recommended to create controllers/handlers and handle routing in
routes/api.js
- You will add any security features to
server.js
Write the following tests in tests/2_functional-tests.js
:
- Creating a new thread: POST request to
/api/threads/{board}
- Viewing the 10 most recent threads with 3 replies each: GET request to
/api/threads/{board}
- Deleting a thread with the incorrect password: DELETE request to
/api/threads/{board}
with an invaliddelete_password
- Deleting a thread with the correct password: DELETE request to
/api/threads/{board}
with a validdelete_password
- Reporting a thread: PUT request to
/api/threads/{board}
- Creating a new reply: POST request to
/api/replies/{board}
- Viewing a single thread with all replies: GET request to
/api/replies/{board}
- Deleting a reply with the incorrect password: DELETE request to
/api/threads/{board}
with an invaliddelete_password
- Deleting a reply with the correct password: DELETE request to
/api/threads/{board}
with a validdelete_password
- Reporting a reply: PUT request to
/api/replies/{board}
--hints--
You can provide your own project, not the example URL.
(getUserInput) => {
assert(
!/.*\/anonymous-message-board\.freecodecamp\.rocks/.test(
getUserInput('url')
)
);
};
Only allow your site to be loaded in an iFrame on your own pages.
async (getUserInput) => {
const data = await fetch(getUserInput('url') + '/_api/app-info');
const parsed = await data.json();
assert.isTrue(parsed.headers['x-frame-options']?.includes('SAMEORIGIN'));
};
Do not allow DNS prefetching.
async (getUserInput) => {
const data = await fetch(getUserInput('url') + '/_api/app-info');
const parsed = await data.json();
assert.isTrue(parsed.headers['x-dns-prefetch-control']?.includes('off'));
};
Only allow your site to send the referrer for your own pages.
async (getUserInput) => {
const data = await fetch(getUserInput('url') + '/_api/app-info');
const parsed = await data.json();
assert.isTrue(parsed.headers['referrer-policy']?.includes('same-origin'));
};
You can send a POST request to /api/threads/{board}
with form data including text
and delete_password
. The saved database record will have at least the fields _id
, text
, created_on
(date & time), bumped_on
(date & time, starts same as created_on
), reported
(boolean), delete_password
, & replies
(array).
You can send a POST request to /api/replies/{board}
with form data including text
, delete_password
, & thread_id
. This will update the bumped_on
date to the comment's date. In the thread's replies
array, an object will be saved with at least the properties _id
, text
, created_on
, delete_password
, & reported
.
You can send a GET request to /api/threads/{board}
. Returned will be an array of the most recent 10 bumped threads on the board with only the most recent 3 replies for each. The reported
and delete_password
fields will not be sent to the client.
You can send a GET request to /api/replies/{board}?thread_id={thread_id}
. Returned will be the entire thread with all its replies, also excluding the same fields from the client as the previous test.
You can send a DELETE request to /api/threads/{board}
and pass along the thread_id
& delete_password
to delete the thread. Returned will be the string incorrect password
or success
.
You can send a DELETE request to /api/replies/{board}
and pass along the thread_id
, reply_id
, & delete_password
. Returned will be the string incorrect password
or success
. On success, the text of the reply_id
will be changed to [deleted]
.
You can send a PUT request to /api/threads/{board}
and pass along the thread_id
. Returned will be the string success
. The reported
value of the thread_id
will be changed to true
.
You can send a PUT request to /api/replies/{board}
and pass along the thread_id
& reply_id
. Returned will be the string success
. The reported
value of the reply_id
will be changed to true
.
All 10 functional tests are complete and passing.
--solutions--
/**
Backend challenges don't need solutions,
because they would need to be tested against a full working project.
Please check our contributing guidelines to learn more.
*/