fedpet / aws-project Goto Github PK

Dashboard -- see mockup

Users should only be able to see their data (waste deliveries), login, logout, read their notifications

Admins have no restrictions

All endpoints except login are to be protected and returning proper error codes (401, 403)

APIs:

POST /waste

{
  "account": "account-id",
  "type": "paper",
  "quantity": 13
}

Should the backend calculate the date of delivery on the fly or should it be sent by the client?

APIs:

GET /accounts/{account-id}/cost?month={month}
returns:

{
  "currency": "EUR",
  "cost": 9.3,
  "details": [
    { "quantity": 1, "type": "glass", "cost": 0.8 },
    { "quantity": 3, "type": "paper", "cost": 1.5 },
    { "quantity": 7, "type": "plastic", "cost": 7 }
  ]
}

API proposal:

GET /data?from={from-date}&to={to-date}[&account={accountId}]

[
  {
    "account": "{accountId}",
    "date": xxxx,
    "type": "plastic",
     "quantity": 10
  },
  ...
]

POST /accounts

{
  "email": "email",
  "role": "role",
  "password": "pwd"
}

Result:
201 Created, json object with the created account

APIs:

GET /users/{user}/notifications

returns:

[
  {
    "read": false,
    "date":  xxxxxxx,
    "type": "plastic",
    "quantity": 10
  },
  ...
]

Template with menu bar, logo, site name

Login screen with email, password

Admin dashboard

features:

• add users
• see aggregated statistics on waste collection

APIs needed:

POST /login
body:

{
  "email": "email",
  "password": "pwd" 
}

reponse:

{
  "email": "{email}",
  "role": "admin|user",
  "token": "{auth-token}"
}

Users should have one role: either admin or user

Implement Bearer Authentication

Every route except for /login will require the header Authorization: Bearer {auth-token}