Complete function Todo

udacity · Nov 14, 2024 · 3c85e1d · 3c85e1d
1 parent c512a82
commit 3c85e1d
Show file tree

Hide file tree

Showing 5 changed files with 29 additions and 11 deletions.
diff --git a/starter/backend/serverless.yml b/starter/backend/serverless.yml
@@ -19,7 +19,6 @@ provider:
   environment:
     TODOS_TABLE: todos-${self:provider.stage}
     TODOS_CREATED_AT_INDEX: CreateAtIndex
-    ATTACHMENT_S3_BUCKET: todo-images-${self:provider.stage}
     TODOS_S3_BUCKET: todo-s3-${self:provider.stage}
     PROJECT_NAME: todo-app
     SIGNED_URL_EXPIRATION: 300
@@ -33,12 +32,16 @@ functions:
     events:
       - http:
           method: get
+          authorizer: Auth
           path: todos
+          cors: true
     iamRoleStatements:
       - Effect: Allow
         Action:
-          - dynamodb:PutItem
-        Resource: arn:aws:dynamodb:${self:provider.region}:*:table/${self:provider.environment.TODOS_TABLE}
+          - dynamodb:Query
+        Resource: 
+          - arn:aws:dynamodb:${self:provider.region}:*:table/${self:provider.environment.TODOS_TABLE}
+          - arn:aws:dynamodb:${self:provider.region}:*:table/${self:provider.environment.TODOS_TABLE}/index/${self:provider.environment.TODOS_CREATED_AT_INDEX}
       - Effect: Allow
         Action:
           - 'xray:PutTraceSegments'
@@ -71,12 +74,17 @@ functions:
     handler: src/lambda/http/updateTodo.handler
     events:
       - http:
+          authorizer: Auth
           method: patch
+          cors: true
           path: todos/{todoId}
+          request:
+            schemas:
+              application/json: ${file(models/update-todo-request.json)}
     iamRoleStatements:
       - Effect: Allow
         Action:
-          - dynamodb:PutItem
+          - dynamodb:UpdateItem
         Resource: arn:aws:dynamodb:${self:provider.region}:*:table/${self:provider.environment.TODOS_TABLE}
       - Effect: Allow
         Action:
@@ -88,13 +96,19 @@ functions:
     handler: src/lambda/http/deleteTodo.handler
     events:
       - http:
+          authorizer: Auth
           method: delete
+          cors: true
           path: todos/{todoId}
     iamRoleStatements:
       - Effect: Allow
         Action:
-          - dynamodb:PutItem
+          - dynamodb:DeleteItem
         Resource: arn:aws:dynamodb:${self:provider.region}:*:table/${self:provider.environment.TODOS_TABLE}
+      - Effect: Allow
+        Action:
+          - s3:DeleteObject
+        Resource: arn:aws:s3:::${self:provider.environment.TODOS_S3_BUCKET}/*
       - Effect: Allow
         Action:
           - 'xray:PutTraceSegments'
@@ -105,13 +119,15 @@ functions:
     handler: src/lambda/http/generateUploadUrl.handler
     events:
       - http:
+          authorizer: Auth
           method: post
+          cors: true
           path: todos/{todoId}/attachment
     iamRoleStatements:
       - Effect: Allow
         Action:
-          - dynamodb:PutItem
-        Resource: arn:aws:dynamodb:${self:provider.region}:*:table/${self:provider.environment.TODOS_TABLE}
+          - s3:PutObject
+        Resource: arn:aws:s3:::${self:provider.environment.TODOS_S3_BUCKET}/*
       - Effect: Allow
         Action:
           - 'xray:PutTraceSegments'

diff --git a/starter/backend/src/dataLayer/todoAccess.mjs b/starter/backend/src/dataLayer/todoAccess.mjs
@@ -58,6 +58,7 @@ export class TodosAccess {
         ':userId': userId
       }
     })
+    console.log("Called getListOfTodo: ", tableTodos.Items);
     return tableTodos.Items
   }
 }
diff --git a/starter/client/.env b/starter/client/.env
@@ -1,3 +1,3 @@
 REACT_APP_AUTH0_DOMAIN=dev-letienlocvn.us.auth0.com
 REACT_APP_AUTH0_CLIENT_ID=1H7JKQ6xREdMhjL4MFYMmPagdV8ncFIg
-REACT_APP_API_ENDPOINT=https://urax6i4r99.execute-api.us-east-1.amazonaws.com/dev/todos
+REACT_APP_API_ENDPOINT=https://urax6i4r99.execute-api.us-east-1.amazonaws.com/dev
diff --git a/starter/client/src/api/todos-api.js b/starter/client/src/api/todos-api.js
@@ -2,7 +2,8 @@ import Axios from 'axios'
 
 export async function getTodos(idToken) {
   console.log('Fetching todos')
-
+  console.log('getTodos token', idToken);
+
   const response = await Axios.get(
     `${process.env.REACT_APP_API_ENDPOINT}/todos`,
     {

diff --git a/starter/client/src/components/Todos.jsx b/starter/client/src/components/Todos.jsx
@@ -78,7 +78,7 @@ export function Todos() {
   async function onTodoDelete(todoId) {
     try {
       const accessToken = await getAccessTokenSilently({
-        audience: `https://test-endpoint.auth0.com/api/v2/`,
+        audience: `https://${domain}/api/v2/`,
         scope: 'delete:todo'
       })
       await deleteTodo(accessToken, todoId)
@@ -92,7 +92,7 @@ export function Todos() {
     try {
       const todo = todos[pos]
       const accessToken = await getAccessTokenSilently({
-        audience: `https://test-endpoint.auth0.com/api/v2/`,
+        audience: `https://${domain}/api/v2/`,
         scope: 'write:todo'
       })
       await patchTodo(accessToken, todo.todoId, {