admin could remove user

server/api/controller/user.js

@@ -254,6 +254,16 @@ const userController = {
     } catch (e) {
       res.status(404).json(e)
     }
+  },
+
+  async remove(req, res) {
+    try {
+      const user = await User.findByPk(req.params.id)
+      user.destroy()
+      res.sendStatus(200)
+    } catch (e) {
+      res.status(404).json(e)
+    }
   }
 }
 

server/api/index.js

@@ -40,6 +40,12 @@ api.post('/user', jwt, isAuth, isAdmin, userController.create)
 // update user (disable/)
 api.put('/user', jwt, isAuth, isAdmin, userController.update)
 
+//delete user
+api.delete('/user/:id', jwt, isAuth, isAdmin, userController.remove)
+
+// 
+// api.delete('/user', userController.remove)
+
 // get all users
 api.get('/users', jwt, isAuth, isAdmin, userController.getAll)