Skip to content

Conversation

@Shreyanshi210205
Copy link
Contributor

@Shreyanshi210205 Shreyanshi210205 commented Oct 16, 2025

Description

This PR adds Joi validation for register and login endpoints, and validates Authorization headers for role-protected routes (admin-only, user-only). JWT tokens now include user id and role to enforce RBAC. Invalid requests return clear 400 errors.

WhatsApp Image 2025-10-16 at 21 01 23_2669182c
WhatsApp Image 2025-10-16 at 21 03 05_050b0ad2

Semver Changes

  • Patch (bug fix, no new features)
  • Minor (new features, no breaking changes)
  • Major (breaking changes)

Issues

#20

Checklist

@Somilg11 Somilg11 merged commit bba280a into OPCODE-Open-Spring-Fest:main Oct 24, 2025
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants