Vintage Cars API

Welcome to the Vintage Cars API project! This API was built by Danilo Canguçu, Theo Adejumo and Francis Eboyie as part of Integrify's 2024 Node.js cohort. The project provides a platform for managing a collection of vintage cars, including operations for creating, retrieving, updating, and deleting car records. It's mainly built using TypeScript Express.js and MongoDB – see full technologies, in Built With section – offering a robust backend solution for vintage car enthusiasts and collectors.

Getting Started

These instructions will get you a copy of the project up and running on your local machine for development and testing purposes.

Prerequisites

Before you begin, ensure you have the following installed:

• Node.js (v12.x or later recommended)
• npm (Node Package Manager)
• yarn (package manager)

Installation

1. Clone the repository to your local machine:

   git clone https://github.com/danilocangucu/vintage-cars.git
   cd vintage-cars

2. Install the required packages:

   npm install

   or

   yarn install

3. Set up your environment variables:

   • Create a new file named .env and include the variables MONGODB_URL and PORT. Contact one of the group members to have the variables values.

4. Start the application:

   • For development:

     npm run dev

   • For production:

     npm run start

Running the Tests

To ensure the reliability and correctness of the API, unit tests and integration tests are provided. Run the tests using the following command:

npm run test

Entity Relationship Diagram

API Endpoints

The API can also be accessed in an AWS EC2 instance at http://13.49.67.88:5000 and supports the following operations:

Authorization API Endpoints

Base URL: /api/v1/auth

Register User

• POST /register: Create a new user account.
  • Request Body:

    {
        "email": "johndoe@example.com",
        "userName": "johndoe",
        "password": "test123",
        "firstName": "John",
        "lastName": "Doe"
    }

  • Response:

    {
        "status": "success",
        "message": "User registered successfully.",
        "data": {
            "id": "660ea0515b16fa19fef1f238",
            "email": "johndoe@example.com",
            "userName": "johndoe",
            "firstName": "John",
            "lastName": "Doe",
            "role": "Customer",
            "banned": false,
            "orderHistory": [
                "660ea0515b16fa19fef1f236"
            ]
        },
        "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VySWQiOiI2NjBlYTA1MTViMTZmYTE5ZmVmMWYyMzgiLCJ1c2VyUm9sZSI6IkN1c3RvbWVyIiwiaXNVc2VyQmFubmVkIjpmYWxzZSwiaWF0IjoxNzEyMjM0NTc3LCJleHAiOjE3MTIzMjA5Nzd9.MsRiKUZAR94DRZbiOk91kBkleG_tuY-0kNGI3jlcTe4"
    }

Login User

• POST /login: Authenticate a user and obtain an authorization token.
  • Request Body:

    {
        "email": "johndoe@example.com",
        "password": "test123"
    }

  • Response:

    {
        "status": "success",
        "message": "Login successful",
        "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VySWQiOiI2NWY4MGFmYzcwZWU3MzRlYTM5OWFlMDQiLCJ1c2VyUm9sZSI6IkFkbWluIiwiaXNVc2VyQmFubmVkIjp0cnVlLCJpYXQiOjE3MTIyMzQ2MDksImV4cCI6MTcxMjMyMTAwOX0.L3ufDNdVoGhhAFdpsp26JqoD73lGBJctI_hsrBB6_KI"
    }

Verify Token

• POST /verify: Verify the authenticity of an authorization token.
  • Request Header:

    Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VySWQiOiI2NWY4MGFmYzcwZWU3MzRlYTM5OWFlMDQiLCJ1c2VyUm9sZSI6IkFkbWluIiwiaXNVc2VyQmFubmVkIjp0cnVlLCJpYXQiOjE3MTIyMzQ2MzMsImV4cCI6MTcxMjMyMTAzM30.wh1tCsCFhYuU_Ai0oAaosee7-nH2vwbpHTUdvJgT7Jw
    

  • Response:

    {
        "status": "success",
        "message": "Token is valid",
        "data": {
            "id": "65f80afc70ee734ea399ae04",
            "email": "johndoe@example.com",
            "userName": "johndoe",
            "firstName": "John",
            "lastName": "Doe",
            "role": "Admin",
            "banned": true,
            "orderHistory": [
                "65fd921ff855b31d09bda502"
            ]
        }
    }

Cars API Endpoints

Base URL: /api/v1/cars

• GET /: Retrieve all cars.

• POST /: Create a new car record. Requires an authorization token from an admin.

  • Request Body:

    {
       "brand": "65fc287d47b3c87edcd0f21a",
       "model": "Mercedes",
       "conditions": [
           "65f80bce70ee734ea399ae07"
       ],
       "description": "German Luxury car known for its excellence and style.",
       "year": 2020,
       "price": 970000,
       "__v": 0
    }

  • Response:

    {
       "data": {
           "brand": "65fc287d47b3c87edcd0f21a",
           "model": "Mercedes",
           "conditions": [
               "65f80bce70ee734ea399ae07"
           ],
           "description": "German Luxury car known for its excellence and style.",
           "year": 2020,
           "price": 970000,
           "_id": "660f9b42d408a4efb4044008",
           "__v": 0
       },
       "message": "car created successfully",
       "status": "success"
    }

• GET /:id: Retrieve a single car by its ID.

• PUT /:id: Update a car record by its ID. Requires an authorization token from an admin.

• DELETE /:id: Delete a car record by its ID. Requires an authorization token from an admin.

Users API Endpoints

Base URL: /api/v1/users

• GET /: Retrieve all users. Requires an authorization token from an admin.

  • Request Header:

  Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VySWQiOiI2NWY4MGFmYzcwZWU3MzRlYTM5OWFlMDQiLCJ1c2VyUm9sZSI6IkFkbWluIiwiaXNVc2VyQmFubmVkIjpmYWxzZSwiaWF0IjoxNzEyMjk4Mzc0LCJleHAiOjE3MTIzODQ3NzR9.bMKZF-ItcS_og2sTWoxQr7paTWQVRf8_YFfRbtBgJYo
  

  • Response:

    {
       "data": [
           {
               "_id": "65f80afc70ee734ea399ae04",
               "role": "Admin",
               "email": "jane.smith@example.com",
               "hashedPassword": "$2b$10$3PxzUyL9.vmwtWGzJZux6.UjLmV7HNc93Eb1WZt9FtspVI2kel16O",
               "userName": "janesmith",
               "firstName": "Jane",
               "lastName": "Smith",
               "banned": false,
               "orderHistory": [
                   "65fd921ff855b31d09bda502"
               ],
               "__v": 1
          },
       ...
       ]
    }

• GET /:userId: Retrieve a single user by its ID.

• PUT /:userId: Update a user record by its ID. Requires an authorization token from either an admin or the user themselves.

• DELETE /:userId: Delete a user record by its ID. Requires an authorization token from either an admin or the user themselves.

• GET /:userId/recover-password: Request password recovery for the user. Requires authorization from the user themselves.

• POST /:userId/change-password: Change the user's password. Requires authorization from the user themselves.

• PATCH /:userId/ban: Ban or unban a user. Requires authorization from an admin.

Orders API Endpoints

Base URL: /api/v1/users/:userId/orderlists

All following methods require authorization from either an admin or the user themselves.

• GET /:orderListId: Retrieve all orders from a specific order list.

  • Response:

    {
        "status": "success",
        "data": {
            "id": "65fd921ff855b31d09bda502",
            "orders": [
                {
                    "id": "66017e8f81a35f42d2db84e3",
                    "carId": {
                        "brand": {
                            "brand": "Maserati"
                        },
                        "model": "Cleo",
                        "conditions": [
                            {
                                "name": "Mint"
                            }
                        ],
                        "description": "Iconic small car known for its performance and style.",
                        "year": 1987,
                        "price": 23000
                    },
                    "quantity": 1,
                    "orderSum": 23000
                },
                ...
            ]
        },
        "message": "Order list fetched with success"
    }

• POST /:orderListId: Add a new order to the specified order list.

  • Response:

    {
        "status": "success",
        "data": {
             "id": "660eab141caeed62129998b7",
             "carId": "66008215a5d86befd591af34",
             "quantity": 2,
             "orderSum": 46000
        },
        "message": "Order added to Order list"
    }

• DELETE /:orderListId/orders/:orderId: Delete a specific order from the specified order list.

  • Response:

    {
        "status": "success",
        "message": "Order 660178fe622d06aa24ddf88f deleted from Order list 65fd921ff855b31d09bda502"
    }

• PUT /:orderListId/orders/:orderId: Update a specific order in the specified order list.

  • Request Body:

    {
      "quantity": 2,
      "orderSum": 46000
    }

  • Response:

    {
        "status": "success",
        "data": {
            "id": "66017f9f9a93d717f80aa53e",
            "carId": "66008215a5d86befd591af34",
            "quantity": 2,
            "orderSum": 46000
        },
        "message": "Order 66017f9f9a93d717f80aa53e updated from Order list 65fd921ff855b31d09bda502."
    }

Built With

• Typescript - A typed superset of JavaScript that compiles to plain JavaScript.
• Express.js - The web framework used for building web applications and APIs.
• MongoDB - The NoSQL database used for storing data.
• Mongoose - MongoDB object modeling tool for Node.js, providing a schema-based solution to model application data.
• Jest - A delightful JavaScript testing framework for unit testing JavaScript code.
• Supertest - A library for testing HTTP servers in Node.js.
• MongoDB Memory Server - In-memory MongoDB server for testing.
• Joi - A powerful schema description language and validator for JavaScript objects.
• Bcrypt - A library for hashing passwords.
• Dotenv - A module for loading environment variables from a .env file into process.env.
• Jsonwebtoken - An implementation of JSON Web Tokens for authentication.
• Uuid - A library for generating UUIDs.
• Nodemon - A utility that monitors for changes in files and automatically restarts the server.
• Ts-jest - A TypeScript preprocessor with source map support for Jest.
• Ts-node - TypeScript execution environment and REPL for Node.js.
• Generate-password - A module for generating random passwords.