0

I would like to implement a small application where users can register themselves and after the registration they can add items to a todo list. Essentially I am looking for ideas/tutorials on how to handle such a scenario using a MongoDB backend (Mongoose) and a node.js/expressjs server. I need to make sure that each and every user who has an account, can only see their todo items.

I found a very good tutorial on how to implement authentication for MongoDB (http://blog.mongodb.org/post/32866457221/password-authentication-with-mongoose-part-1) but this doesn't quite tell me how to handle what happens after the user logs in. Should I just start loading different JS modules once the authentication was successful?

My other idea was to create a user ID against each todo item (probably not the best option). I'm fairly new to MongoDB and I come from a MySQL background, hence I'm used to the various JOINs etc but I'm not sure how much this is relevant in a NoSQL world.

Thanks.

Update:

Another idea is to create username/password for each user that allows them to connect to the database and create collections based on their usernames therefore each user will have their own collection...? I'm not to sure how to handle this scenario either so I'm still open for suggestions :)

Tamas
  • 10,953
  • 13
  • 47
  • 77

1 Answers1

2

I don't think you should handle users directly with MongoDB. The "standard" way of doing this is to handle them with your backend server (NodeJs for example). It would provide you more control of what your users can and can't do. Here is a good example of how you can do it with Express : how to implement login auth in node.js

My advice would be to create a collection for users, containing :

  • a field username
  • a field password (encrypted)

And a collection for todos containing :

  • a field user (the objectId of the user)
  • a field todo

This is a very very basic setup but it's a start.

Community
  • 1
  • 1
Asdine
  • 2,856
  • 1
  • 16
  • 10