Everyone can edit/add songs right now. This probably isn't a big deal, but later on down the line it probably makes sense to have some things that only admins can do (deleting songs might be one?). I was thinking about a flow where when the user logs in for the first time or comes back they get a JWT right? Well part of the JWT could now be isAdmin: true|false, then whenever they reload the page completely (i.e. the app reloads, not switching pages within the app) it could check their local storage JWT against what is true on the server and it could do something fun to them if they've modified their JWT to get extra permissions.
Just an idea I had last night anyway.
Everyone can edit/add songs right now. This probably isn't a big deal, but later on down the line it probably makes sense to have some things that only admins can do (deleting songs might be one?). I was thinking about a flow where when the user logs in for the first time or comes back they get a JWT right? Well part of the JWT could now be
isAdmin: true|false, then whenever they reload the page completely (i.e. the app reloads, not switching pages within the app) it could check their local storage JWT against what is true on the server and it could do something fun to them if they've modified their JWT to get extra permissions.Just an idea I had last night anyway.