#Directus

In this episode we are going to implement signup functionality for our Directus and Next.js app. You will see, this is very easy.
We are going to use special endpoint that Directus provides us, and send new user information using Next.js frontend.
Code used in this video
bit.ly/3NFXLil
You can support my work on Patreon
/ watchlearn
Follow me on Social Media
Github: github.com/iva...
Twitter: / ivan_doric

[@kirillbaryba746]

Thanks 👍

[@xxxxxxxxxxxxy]

@WatchandLearnTutorials do you cover email verification for signup anywhere in this tutorial? I was looking but unable to find it. This would be a fantastic addition to an already great resource!

[@Civilizer1976]

Directus 10 is already undergoing validation.

[@harshuuu1835]

How you created the file using keyboard shortcut?

[@WatchandLearnTutorials]

In PHPStorm I do cmd + up arrow, go to folder that I want to create a new file, and then do option+cmd+n (this is custom shortcut so probably you need to check that). And that is it.

[@deogratiassaidi2874]

I´m getting "You don't have permission to access this......FORBIDDEN" when creating a new user...any idea why this is the case.

[@kabir52]

did you figure out how to resolve this?

[@odev6764]

Is role id exposed on your request on client ? if yes, is it not a security fail if an attacker discover admin role?

[@WatchandLearnTutorials]

But the attacker would not discover admin role, since we are not sending admin role, we are sending customer role. Which should be publicly available.

[@gbfgtki]

@@WatchandLearnTutorials if the user finds the id of the admin role in any way, you're fucked

[@WatchandLearnTutorials]

@@gbfgtki I tested this a bit, and you are right. But for someone to guess 36 character string would be pretty hard. Also if you really need to send admin role ID from the frontend, then you should save it to .env variable. But yeah, technically you are right and good catch, I think I will open up an issue on Directus Github Page and see what they say about it.

[@ricardomarques748]

I was thinking the same. maybe that should be set in the server side