This Node.js Express API simplifies user management, offering registration, login, user data retrieval, delete and update functionalities. User can access to their accounts with limited authorization when it comes to deleting accounts or updating details. API tests have done using ThunderClient/Postman and MongoDB.
User Registration & Log In (Authentication)
User data retreival: Once a user is logged in a session is created. Users have to be logged in to fetch user details.
Authorization: Users can only update their own credentials and not anyone elses. This also applies to deleting a users as well, where a user can only delete their own profile. When a user tries an unauthorized action such as updating or deleting another user they will not be allowed.