• Follow the instructions in the "Lab Instructions" documentation in the reference folder of the class repository

Implement Role Based Authentication

• Protect your API Routes with the proper permissions based on user capability

  • app.get('/schema') should require the superuser capability
  • app.get(...) should require the read capability
  • app.post(...) should require the create capability
  • app.put(...) should require the update capability
  • app.patch(...) should require the update capability
  • app.delete(...) should require the delete capability

• You will need to create, allocate, and identify user permissions in the model

• You will need to restrict based on the given permission via middleware

• Add support for basic and bearer authentication
• You will need to add fields for those on the form
• You will need to pass those through, when present, in the superagent calls.

• Add tests to the api routes, asserting restricted access to the routes as shown.

Write a description of the project in your README.md, including detailed instructions for how to build your app. In your frontend README.md add a code block with your frontend .env vars, and in your backend README.md add a code block with your backend .env vars.