M7 complete

server.js

@@ -47,14 +47,22 @@ app.get("/course", checkJwt, checkScope(["read:courses"]), function(req, res) {
   });
 });
 
-app.delete(
-  "/course/:courseId",
-  checkJwt,
-  checkScope(["delete:courses"]),
-  function(req, res) {
-    res.json({ message: `Deleted ${req.params.courseId}` });
-  }
-);
+function checkRole(role) {
+  return function(req, res, next) {
+    const assignedRoles = req.user["http://localhost:3000/roles"];
+    if (Array.isArray(assignedRoles) && assignedRoles.includes(role)) {
+      return next();
+    } else {
+      return res.status(401).send("Insufficient role");
+    }
+  };
+}
+
+app.get("/admin", checkJwt, checkRole("admin"), function(req, res) {
+  res.json({
+    message: "Hello from an admin API!"
+  });
+});
 
 app.listen(3001);
 console.log("API server listening on " + process.env.REACT_APP_AUTH0_AUDIENCE);

src/Courses.js

@@ -15,39 +15,23 @@ class Courses extends Component {
       })
       .then(response => this.setState({ courses: response.courses }))
       .catch(error => this.setState({ message: error.message }));
-  }
 
-  deleteCourse(courseId) {
-    fetch(`/course/${courseId}`, {
-      method: "DELETE",
+    fetch("/admin", {
       headers: { Authorization: `Bearer ${this.props.auth.getAccessToken()}` }
     })
       .then(response => {
         if (response.ok) return response.json();
         throw new Error("Network response was not ok.");
       })
-      .then(response =>
-        this.setState(state => ({
-          courses: state.courses.filter(course => course.id !== courseId)
-        }))
-      )
+      .then(response => console.log(response))
       .catch(error => this.setState({ message: error.message }));
   }
 
   render() {
     return (
       <ul>
         {this.state.courses.map(course => {
-          return (
-            <li key={course.id}>
-              {this.props.auth.userHasScopes(["delete:courses"]) && (
-                <button onClick={() => this.deleteCourse(course.id)}>
-                  Delete
-                </button>
-              )}{" "}
-              {course.title}
-            </li>
-          );
+          return <li key={course.id}>{course.title}</li>;
         })}
       </ul>
     );