FriendAdvisor is a mobile app with a focus on allowing friends and family to coordinate and receive text notifications about upcoming group events.

We could add a function to the notification scheduler that will do the following:

• remove events from groups that don't exist
• remove groups that have no members
• remove groups whose joinId was not generated (The function will set the joinId to "" if it cannot create an id within 50 attempts)

We should have reasonable limits in place for how quickly people can:

• [ ] join groups (prevent guessing join codes)
• [ ] create events
• [ ] edit events
• [ ] edit groups
• [ ] delete groups / events
• [ ] get data for a group

Pretty much everything should be covered here, but different endpoints should have different limits

• [x] Make middleware to authenticate (@realprogrammer5000 )
• [x] Remove usage of user id parameter in backend and use middleware authentication
• [x] Make helper function in frontend to handle authenticated requests
• [x] Remove usage of user id parameter in frontend, replace with token
• [x] Authenticate user membership on group modification endpoints (@demonlexe )

On the backend, a method for /groups/join will be added to take two params: userId and joinId, then add the userId to the group's members.

• [x] frontend
• [x] backend

Improve phone number input

Currently there is no input validation for when a user inputs a phone number. The Twilio API requires phone numbers to begin with a plus sign, followed by the country code, followed by the rest of the phone number (e.g. "+11234567899", where +1 is the country code, and 123-456-7899 is the user's phone number). One way to improve the user input is to require the user to specify a country code, and then enter their phone number. There may already be a built in phone number input form? We should make sure they are entering all of the digits of the number and without any extra symbols such as parenthesis or dashes.

Groups should be able to have short descriptions about themselves. I already added backend support for this, so now it just needs to be supported on the frontend.

• [x] frontend
• [x] backend

Event descriptions should be optional, but when no description is inputted, it stores "undefined" as the description instead.

The optional event description also needs to be handled in the backend when sending the messages through Twilio. Currently when no description is present, the message contains "Description: undefined" but instead, no description label should be sent.

• [x] frontend
• [x] backend

Phone numbers are currently displayed on user profiles in the exact manner that the user inputted their phone number. I'm thinking that we should display their phone number in a more readable format, for example +1 (123) 456-7899

Additionally, users should be able to make their phone numbers private, so that it is not publicly displayed on their profile.

After a user has inputted a valid phone number (see issue https://github.com/bradwj/friend-advisor/issues/18), we need to send a verification code to the entered phone number, and request the user to input the verification code in the app. This way we can confirm that user's are using their own phone numbers and aren't inputting someone else's to spam them with notifications.

The user should be able to type in a city or address when choosing an event location. Also, the user should be able to add a custom location, which doesn't specify a location on the map, and instead just displays the user input next to the location. For example, say a friend group wants to meet up at Dining Hall West. They should have the option to specify a location on the map, or instead just use "Dining Hall West" as the data point for the location of the event.

I was sent a notification saying "You have ____ today!" on 2/17, 7pm, when the event is on 2/18, 7pm.

The code needs to be updated to make sure the DAY is the same for this notification to be sent. Right now the code just checks if it is within 24 hours.

Page did not redirect after clicking create, document was added to database but member was added as undefined. Attempt was on mobile device.

Also on mobile device, profile would not load.

It would be cool feature if users could create events that only they themselves get notified for, without having to be in any specific group or create a group beforehand.

When a request is sent to the backend for a user to be removed from a group, we can check if there are no users in the group after the user is removed, and then call the function to delete the group itself.

In the function to delete a group, we can call a function that removes any events from that group as well.

With more and more users, we should optimize our firebase use to save money. Caching is a great way to avoid redundant functions calls and firestore reads.

One of the ways to do this is to query firestore for most recently updated documents before the previous cache, using lastUpdated property in docs.

• [ ] Leave group - delete events in local cache

Local storage methods: https://developer.mozilla.org/en-US/docs/Web/API/Web_Storage_API https://developer.mozilla.org/en-US/docs/Web/API/IndexedDB_API https://developer.mozilla.org/en-US/docs/Web/API/Cache