Toti Cakery - Backend API Gateway Engine

This repository serves as the core backend operational engine for the Toti Cakery system. It is built using FastAPI with a fully asynchronous architecture and PostgreSQL 17 as the primary database management system.

The application implements a structured access control mechanism using a dynamic Hierarchical Role-Based Access Control (RBAC) framework.

---

🛠️ System Requirements

Before running this project, ensure the following software is installed on your machine:

• Python 3.12+
• PostgreSQL 17+
• Homebrew (macOS / Apple Silicon users only)
• Postman or Insomnia (for API testing)

---

📥 Installation & Local Setup

Follow these steps to run the project locally.

1. Clone the Repository

git clone https://github.com/nicholl2/backend-cakery.git
cd backend-cakery/Backend

---

2. Create and Activate Virtual Environment

Create a Python virtual environment:

python3 -m venv venv

Activate the virtual environment:

macOS / Linux

source venv/bin/activate

Windows (PowerShell)

.\venv\Scripts\Activate.ps1

---

3. Install Dependencies

pip install --upgrade pip
pip install -r requirements.txt

---

4. Setup PostgreSQL Database

Install PostgreSQL 17 (macOS)

brew install postgresql@17

Start the PostgreSQL service:

brew services start postgresql@17

Open the PostgreSQL CLI:

psql postgres

Inside the PostgreSQL shell, execute:

CREATE USER postgres WITH PASSWORD 'yourpassword' SUPERUSER;
CREATE DATABASE toti_cakery OWNER postgres;

Exit PostgreSQL:

\q

---

5. Configure Environment Variables

Create a .env file in the project root directory and add the following configuration:

DATABASE_URL=your-database-url
SECRET_KEY=your-super-secret-key-change-this-in-production
ALGORITHM=HS256
ACCESS_TOKEN_EXPIRE_MINUTES=480
SERVICE_API_KEY=your-chatbot-service-key
CHATBOT_URL=http://localhost:8000
CHATBOT_INTERNAL_KEY=your-internal-key
CHATBOT_WA_NUMBER=6281234567890
MIDTRANS_SERVER_KEY=SB-Mid-server-...
MIDTRANS_IS_PRODUCTION=...
CORS_ORIGINS=http://your-cors-origin
ENVIRONMENT=development
WA_VERIFICATION_MODE=mock

Catatan Pengujian WA & Keamanan Produksi:

• ENVIRONMENT: "development" | "production"
• WA_VERIFICATION_MODE: "mock" | "real" (Jika ENVIRONMENT="production", sistem secara otomatis memaksakan mode "real" untuk menjaga keamanan verifikasi).
• Default CORS_ORIGINS telah mendukung frontend produksi di Vercel (https://toti-cakery.vercel.app) dan development local (localhost:5173).

---

6. Run the FastAPI Server

uvicorn app.main:app --reload

The API server will be available at:

http://127.0.0.1:8000

---

📚 API Documentation

FastAPI automatically generates interactive API documentation.

• Swagger UI http://127.0.0.1:8000/docs

• ReDoc http://127.0.0.1:8000/redoc

---

🏗️ Tech Stack

• FastAPI
• PostgreSQL 17
• SQLAlchemy (Async)
• Alembic
• Pydantic
• JWT Authentication
• Hierarchical RBAC