diff --git a/README.md b/README.md
index 947daac..aac3325 100644
--- a/README.md
+++ b/README.md
@@ -1,44 +1,19 @@
# node-mentoring-shop
-[https://d17btkcdsmqrmh.cloudfront.net/node-gmp/docs/nosql/homework](https://d17btkcdsmqrmh.cloudfront.net/node-gmp/docs/nosql/homework)
+[https://d17btkcdsmqrmh.cloudfront.net/node-gmp/docs/authorization/homework](https://d17btkcdsmqrmh.cloudfront.net/node-gmp/docs/authorization/homework)
We are going to create an Express application for online shop which sells different types of products (like e.g Amazon).
-In this task we will modify the application we created in [Express and Layered Architecture](https://github.com/kandalova/node-mentoring-shop/pull/1) module by moving data storage to NoSQL database.
-
-The application has 4 primary entities:
-
-User - can add some products to the cart and then order them ([scheme](https://github.com/kandalova/node-mentoring-shop/blob/task_6_shop_express.js/src/scheme/UserScheme.ts)).
-
-Product - represents product information that user can order ([scheme](https://github.com/kandalova/node-mentoring-shop/blob/task_6_shop_express.js/src/scheme/ProductScheme.ts)).
-
-Cart - contains a list of products and their amount that user wants to order ([scheme](https://github.com/kandalova/node-mentoring-shop/blob/task_6_shop_express.js/src/scheme/CartScheme.ts)).
-
-Order - contains list of products from cart that user has ordered ([scheme](https://github.com/kandalova/node-mentoring-shop/blob/task_6_shop_express.js/src/scheme/OrderScheme.ts)).
-
-**Relations between entities:**
-
-Each User can have only one non-deleted Cart at a time.
-Each Cart is attached to a specific User.
-
-One User can have multiple Order. Each Order is attached to a specific User.
-
-Cart contains a list of products that user wants to order with the amount of those products specified.
+In this task we will need to modify existing [Express application](https://github.com/kandalova/node-mentoring-shop/pull/3) by extending user model, adding authorization and authentication flows.
**Implementation criteria:**
-- TypeScript is used.
-- Data is stored in `MongoDB` database.
-- `Docker` image is used for local development (check Running [MongoDB as a Docker Container](https://www.baeldung.com/linux/mongodb-as-docker-container#2-building-container-using-a-compose-file) for an example of docker-compose file).
-- `Mongoose` is used as ODM for querying.
-- `Data Access Layer` is rewritten to query `MongoDB`.
-- Models are created based on entity schemas used in Express and Layered Architecture module.
-- Models have proper relations between each other based on information specified above.
-
-**API endpoints**
-
-[swagger](https://github.com/kandalova/node-mentoring-shop/blob/task_6_shop_express.js/swagger.md)
-
-`
+- Authentication middleware is added to check if token provided is valid and if user encoded in token exists. If no, `401 Unauthorized` status code is returned. Otherwise, user can do action they intended to do.
+- Only admin users can delete user cart. Authorization middleware is added for this purpose. If token provided doesn't belong to admin member, `403 Forbidden` status code is returned.
**Setup for startring (once)**
@@ -60,8 +35,26 @@ In the project root folder
**First time starting**
- Create your first database in MongoDB. Then, create your first collection (Example - User).
+- It's possible to use seeder in `index.ts` to mock `Product` model.
+- `Register` and `login` user, use returned token in requests's headers.
+
+**API endpoints**
+
+[swagger](https://github.com/kandalova/node-mentoring-shop/blob/task_9_authorization/swagger.md)
+
+
+
+**How to convert `yaml` to `md`**
+
+`widdershins swagger.yaml --language_tabs 'http:HTTP' -o swagger.md`
**Results**
-
+ => {
- const cart = await cartDB.find((cart) => cart.userId === userId && !cart.isDeleted);
- return cart;
-}
-
-export const findUserCartIdx = async (userId: string) => {
- const index = await cartDB.findIndex((cart) => cart.userId === userId && !cart.isDeleted);
- return index;
-}
-
-export const findUserCartIdxByID = async (userId: string, cartId: string) => {
- const index = await cartDB.findIndex((cart) => cart.userId === userId && cart.id === cartId && !cart.isDeleted);
- return index;
-}
-
-export const updateCartProperty = async (cartIdx: number, property: CartEditableProperties, value: boolean | IPopulatedCartItem[]) => {
- cartDB[cartIdx][property] = value;
-}
-
-export const getCartByIdx = async (cartIdx: number): Promise => {
- return await cartDB[cartIdx];
-}
-export const getCartProductIdx = async (cartIdx: number, productId: string) => {
- const index = await cartDB[cartIdx].items.findIndex((item: IPopulatedCartItem) => item.product.product === productId);
- return index;
-}
-
-export const pushCartItem = async (cartIdx: number, product: IPopulatedCartItem) => {
- await cartDB[cartIdx].items.push(product)
-}
-
-export const updateCartItemCount = async (cartIdx: number, productIdx: number, count: number) => {
- const cartItem = cartDB[cartIdx].items[productIdx];
- cartItem.count = count;
-}
-
-export const deleteCartItem = async (cartIdx: number, productIdx: number) => {
- const cartItems = cartDB[cartIdx].items;
- await cartItems.splice(productIdx, 1);
-}
diff --git a/src/repository/order.repository.ts b/src/repository/order.repository.ts
deleted file mode 100644
index 950dc29..0000000
--- a/src/repository/order.repository.ts
+++ /dev/null
@@ -1,32 +0,0 @@
-import { orderDB } from "../db/db";
-import { IPopulatedCartItem } from "../scheme/CartScheme";
-
-type ORDER_STATUS = 'created' | 'completed';
-
-interface IPopulatedOrder {
- id: string,
- userId: string;
- cartId: string;
- items: IPopulatedCartItem[]
- payment: {
- type: string,
- address?: unknown,
- creditCard?: unknown,
- },
- delivery: {
- type: string,
- address: unknown,
- },
- comments: string,
- status: ORDER_STATUS;
- total: number;
-}
-
-export const pushOrder = async (order: IPopulatedOrder): Promise => {
- await orderDB.push(order);
- return orderDB.length - 1;
-}
-
-export const getOrderByIdx = async (idx: number): Promise => {
- return await orderDB[idx];
-}
diff --git a/src/repository/product.repository.ts b/src/repository/product.repository.ts
deleted file mode 100644
index 32ff596..0000000
--- a/src/repository/product.repository.ts
+++ /dev/null
@@ -1,11 +0,0 @@
-import { productDB } from "../db/db";
-import { IProduct } from "../scheme/ProductScheme";
-
-export const findProduct = async (id: string): Promise => {
- const product = await productDB.find((product) => product.id === id);
- return product;
-}
-
-export const findProducts = async (): Promise => {
- return productDB;
-}
diff --git a/src/repository/user.repository.ts b/src/repository/user.repository.ts
deleted file mode 100644
index 6651535..0000000
--- a/src/repository/user.repository.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import { userDB } from "../db/db";
-
-export const findUser = async (userId: string) => {
- return await userDB.find((id) => id === userId);
-}
diff --git a/src/scheme/UserScheme.ts b/src/scheme/UserScheme.ts
index d3b8c38..34bdb33 100644
--- a/src/scheme/UserScheme.ts
+++ b/src/scheme/UserScheme.ts
@@ -2,10 +2,16 @@ import { Schema, model } from "mongoose";
export interface IUser {
name: string,
+ email: string,
+ password: string,
+ role: string
}
const userSchema = new Schema({
name: { type: String, required: true },
+ email: { type: String, unique: true, required: true },
+ password: { type: String, required: true },
+ role: { type: String, required: true },
}, { versionKey: false })
export const UserModel = model("User", userSchema);
diff --git a/src/seeder/userSeeder.ts b/src/seeder/userSeeder.ts
deleted file mode 100644
index a8c3548..0000000
--- a/src/seeder/userSeeder.ts
+++ /dev/null
@@ -1,9 +0,0 @@
-import { userDB } from "../db/db"
-import { UserModel } from "../scheme/UserScheme";
-
-export const runUserSeeder = async () => {
- userDB.forEach(async (value, i) => {
- const newUser = new UserModel({ name: `User-${i}` });
- await newUser.save();
- });
-}
diff --git a/src/service/user.service.ts b/src/service/user.service.ts
new file mode 100644
index 0000000..c61728d
--- /dev/null
+++ b/src/service/user.service.ts
@@ -0,0 +1,39 @@
+import bcrypt from "bcryptjs";
+import * as jwt from "jsonwebtoken";
+import { UserModel } from "../scheme/UserScheme";
+import { throwLoginUserError, throwRegisterError } from "../utils/errors";
+
+const findUserOrFail = async (email: string) => {
+ return UserModel.findOne({ email }).orFail(() => throwLoginUserError());
+}
+
+export const createUser = async (name: string, isAdmin: boolean, email: string, password: string) => {
+ const oldUser = await UserModel.findOne({ email });
+ if (oldUser) {
+ throwRegisterError();
+ }
+ const encryptedPassword = await bcrypt.hash(password, 10);
+ await UserModel.create({
+ name,
+ email: email.toLowerCase(),
+ password: encryptedPassword,
+ role: isAdmin ? "admin" : "customer"
+ });
+}
+
+export const loginUser = async (email: string, password: string) => {
+ const user = await findUserOrFail(email);
+ if (!isTheSameCrypt(password, user.password)) {
+ throwLoginUserError()
+ }
+ const token = jwt.sign(
+ { user_id: user._id.toString(), email, role: user.role },
+ process.env.TOKEN_KEY!,
+ { expiresIn: '2h' }
+ );
+ return { token };
+}
+
+const isTheSameCrypt = async (str1: string, str2: string) => {
+ await bcrypt.compare(str1, str2)
+}
diff --git a/src/utils/cartUtils.ts b/src/utils/cartUtils.ts
index d66e008..e8c456f 100644
--- a/src/utils/cartUtils.ts
+++ b/src/utils/cartUtils.ts
@@ -1,4 +1,4 @@
-import { IPopulatedCartItem, ICartResponse, ICart, IDeleteCartResponse, OmitCart, PopulatedCart } from "../scheme/CartScheme";
+import { IPopulatedCartItem, ICartResponse, ICart, IDeleteCartResponse, OmitCart, PopulatedCart } from "../scheme/CartScheme";
import { IOrderInfo } from "../scheme/OrderScheme";
export const getOmitCart = ({ _id, items }: PopulatedCart | ICart): OmitCart => {
diff --git a/src/utils/errors.ts b/src/utils/errors.ts
index 9832f11..207a01c 100644
--- a/src/utils/errors.ts
+++ b/src/utils/errors.ts
@@ -15,26 +15,10 @@ const getResposeError = (message: string, status: number): ResponseError => {
return err;
}
-export const throwNoUser = (id: string) => {
- throw new Error(`No user ${id}`);
-}
-
-export const throwCartExistsError = (id: string): ResponseError => {
- throw new ResponseError(`Cart for user ${id} already exists`, 400);
-}
-
-export const throwNoCartExistsById = (id: string, cartId: string) => {
- throw new Error(`No cart ${cartId} for user ${id}`);
-}
-
export const throwNoCartExists = (id: string) => {
throw new ResponseError(`No cart for user ${id}`, 400);
}
-export const getNoCartExists = (id: string): ResponseError => {
- return new ResponseError(`No cart for user ${id}`, 400);
-}
-
export const throwNoProductExists = () => {
throw new ResponseError(`No product for user`, 400);
}
@@ -43,18 +27,30 @@ export const throwEmptyCart = (id: string) => {
throw new Error(`Cart for user ${id} is empty`);
}
-export const throwUnauthorized = (status = 401) => {
- throw getResposeError(`Header x-user-id is missing or no user with such id`, status)
-}
-
export const getUnauthorizedError = (status = 401) => {
return getResposeError(`Header x-user-id is missing or no user with such id`, status)
}
-export const getForbidenError = (status = 403) => {
- return getResposeError(`You must be authorized user`, status)
-}
-
export const getPutSchemeError = (status = 400) => {
return getResposeError(`Bad request body`, status)
}
+
+export const throwRegisterError = (status = 409) => {
+ throw getResposeError(`User Already Exist. Please Login`, status)
+}
+
+export const throwLoginUserError = (status = 400) => {
+ throw getResposeError(`Invalid Credentials`, status)
+}
+
+export const getAuthError = (status = 401) => {
+ return getResposeError(`Token is required`, status);
+}
+
+export const getTokenError = (status = 401) => {
+ return getResposeError(`Invalid Token`, status);
+}
+
+export const getAdminError = (status = 403) => {
+ return getResposeError(`Forbidden`, status);
+}
diff --git a/src/utils/utils.ts b/src/utils/utils.ts
index 5662690..0c76711 100644
--- a/src/utils/utils.ts
+++ b/src/utils/utils.ts
@@ -1,24 +1,5 @@
-import { v4 as uuid } from 'uuid';
-import cloneDeep from 'lodash.clonedeep';
-import { NextFunction } from 'express';
import { IResponse, IResponseError } from '../scheme/ServiceUtils';
-export const getUUID = () => {
- return uuid();
-};
-
-export const createDeepCopy = (arr: T[]): T[] => {
- return cloneDeep(arr);
-}
-
-export const promiseHandler = async (prom: Promise, next: NextFunction) => {
- try {
- return await prom;
- } catch (error) {
- next(error);
- }
-}
-
export const getResponseError = async (message: string): Promise => {
return {
data: null,
diff --git a/swagger.md b/swagger.md
index 6e1231d..ad11ff4 100644
--- a/swagger.md
+++ b/swagger.md
@@ -1,14 +1,12 @@
---
-title: API v1.0.0
+title: shop api v1.0.0
language_tabs:
- - http: http
- - HTTP: HTTP
+ - "'http": HTTP'
language_clients:
- - http: ""
- - HTTP: ""
+ - "'http": ""
toc_footers: []
includes: []
-search: false
+search: true
highlight_theme: darkula
headingLevel: 2
@@ -16,42 +14,24 @@ headingLevel: 2
-null v1.0.0
+shop api v1.0.0
> Scroll down for code samples, example requests and responses. Select a language for code samples from the tabs above or the mobile navigation menu.
-cart
+# Authentication
-## get__api_profile_cart
-
-> Code samples
+- HTTP Authentication, scheme: bearer
-```http
-GET /api/profile/cart HTTP/1.1
+cart
-Accept: application/json
-x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
-
-```
-
-```http
-GET /api/profile/cart HTTP/1.1
-
-Accept: application/json
-x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
+## get__api_profile_cart
-```
+> Code samples
`GET /api/profile/cart`
*Get user cart or create if it is missing*
-Parameters
-
-|Name|In|Type|Required|Description|
-|---|---|---|---|---|
-|x-user-id|header|string(uuid)|true|User id (uuid)|
-
> Example responses
> 200 Response
@@ -60,11 +40,11 @@ x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
{
"data": {
"cart": {
- "id": "eb5a26af-6e4c-4f31-a9b1-3450d42ac66c",
+ "id": "6546650c159ab6e8bb59f925",
"items": [
{
"product": {
- "id": "891389f0-4312-42d6-a650-6fda0959c734",
+ "id": "65426846103aa5e276433519",
"title": "Book",
"description": "Interesting book",
"price": 200
@@ -85,7 +65,7 @@ x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
{
"data": null,
"error": {
- "message": "User is not authorized"
+ "message": "Token is required"
}
}
```
@@ -96,7 +76,7 @@ x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
{
"data": null,
"error": {
- "message": "You must be authorized user"
+ "message": "Invalid Token"
}
}
```
@@ -117,36 +97,19 @@ x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
|Status|Meaning|Description|Schema|
|---|---|---|---|
|200|[OK](https://tools.ietf.org/html/rfc7231#section-6.3.1)|Returns user cart|[CartResponse](#schemacartresponse)|
-|401|[Unauthorized](https://tools.ietf.org/html/rfc7235#section-3.1)|Unauthorized (when no user matching authorization header is found)|[CartResponse](#schemacartresponse)|
-|403|[Forbidden](https://tools.ietf.org/html/rfc7231#section-6.5.3)|Forbidden (when authorization header is missing)|[CartResponse](#schemacartresponse)|
+|401|[Unauthorized](https://tools.ietf.org/html/rfc7235#section-3.1)|Unauthorized (when no token is found)|[CartResponse](#schemacartresponse)|
+|403|[Forbidden](https://tools.ietf.org/html/rfc7231#section-6.5.3)|Forbidden (when token is missed or invalid)|[CartResponse](#schemacartresponse)|
|500|[Internal Server Error](https://tools.ietf.org/html/rfc7231#section-6.6.1)|Internal server error|[CartResponse](#schemacartresponse)|
-
-This operation does not require authentication
+
+To perform this operation, you must be authenticated by means of one of the following methods:
+bearerAuth
## put__api_profile_cart
> Code samples
-```http
-PUT /api/profile/cart HTTP/1.1
-
-Content-Type: application/json
-Accept: application/json
-x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
-
-```
-
-```http
-PUT /api/profile/cart HTTP/1.1
-
-Content-Type: application/json
-Accept: application/json
-x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
-
-```
-
`PUT /api/profile/cart`
*Update user cart*
@@ -155,7 +118,7 @@ x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
```json
{
- "productId": "915b2f40-9fd9-47f2-9b51-628f3dc69aac",
+ "productId": "65426846103aa5e276433519",
"count": 5
}
```
@@ -164,7 +127,6 @@ x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
|Name|In|Type|Required|Description|
|---|---|---|---|---|
-|x-user-id|header|string(uuid)|true|User id (uuid)|
|body|body|[UpdateCartRequestBody](#schemaupdatecartrequestbody)|false|none|
> Example responses
@@ -175,11 +137,11 @@ x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
{
"data": {
"cart": {
- "id": "eb5a26af-6e4c-4f31-a9b1-3450d42ac66c",
+ "id": "6546650c159ab6e8bb59f925",
"items": [
{
"product": {
- "id": "891389f0-4312-42d6-a650-6fda0959c734",
+ "id": "65426846103aa5e276433519",
"title": "Book",
"description": "Interesting book",
"price": 200
@@ -211,7 +173,7 @@ x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
{
"data": null,
"error": {
- "message": "User is not authorized"
+ "message": "Token is required"
}
}
```
@@ -222,7 +184,7 @@ x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
{
"data": null,
"error": {
- "message": "You must be authorized user"
+ "message": "Invalid Token"
}
}
```
@@ -253,37 +215,22 @@ x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
|Status|Meaning|Description|Schema|
|---|---|---|---|
-|200|[OK](https://tools.ietf.org/html/rfc7231#section-6.3.1)|Cart can be updated in the following ways - 1) products can be added 2) products can be dropped 3) amount of product might have changed. Request body to be provided contains a snapshot of cart after changes.|[CartResponse](#schemacartresponse)|
+|200|[OK](https://tools.ietf.org/html/rfc7231#section-6.3.1)|Cart can be updated in the following ways - 1) products can be added 2) products can be dropped 3) amount of product might have changed.|[CartResponse](#schemacartresponse)|
|400|[Bad Request](https://tools.ietf.org/html/rfc7231#section-6.5.1)|Bad request|[CartResponse](#schemacartresponse)|
-|401|[Unauthorized](https://tools.ietf.org/html/rfc7235#section-3.1)|Unauthorized (when no user matching authorization header is found)|[CartResponse](#schemacartresponse)|
-|403|[Forbidden](https://tools.ietf.org/html/rfc7231#section-6.5.3)|Forbidden (when authorization header is missing)|[CartResponse](#schemacartresponse)|
+|401|[Unauthorized](https://tools.ietf.org/html/rfc7235#section-3.1)|Unauthorized (when no token is found)|[CartResponse](#schemacartresponse)|
+|403|[Forbidden](https://tools.ietf.org/html/rfc7231#section-6.5.3)|Forbidden (when token is missed or invalid)|[CartResponse](#schemacartresponse)|
|404|[Not Found](https://tools.ietf.org/html/rfc7231#section-6.5.4)|Not Found|[CartResponse](#schemacartresponse)|
|500|[Internal Server Error](https://tools.ietf.org/html/rfc7231#section-6.6.1)|Internal server error|[CartResponse](#schemacartresponse)|
-
-This operation does not require authentication
+
+To perform this operation, you must be authenticated by means of one of the following methods:
+bearerAuth
## delete__api_profile_cart
> Code samples
-```http
-DELETE /api/profile/cart HTTP/1.1
-
-Accept: application/json
-x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
-
-```
-
-```http
-DELETE /api/profile/cart HTTP/1.1
-
-Accept: application/json
-x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
-
-```
-
`DELETE /api/profile/cart`
*Empty user cart*
@@ -292,7 +239,7 @@ x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
|Name|In|Type|Required|Description|
|---|---|---|---|---|
-|x-user-id|header|string(uuid)|true|User id (uuid)|
+|x-user-id|header|string|true|User id|
> Example responses
@@ -313,7 +260,7 @@ x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
{
"data": null,
"error": {
- "message": "User is not authorized"
+ "message": "Token is required"
}
}
```
@@ -324,7 +271,7 @@ x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
{
"data": null,
"error": {
- "message": "You must be authorized user"
+ "message": "Forbidden"
}
}
```
@@ -345,44 +292,23 @@ x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
|Status|Meaning|Description|Schema|
|---|---|---|---|
|200|[OK](https://tools.ietf.org/html/rfc7231#section-6.3.1)|Returns success = true if cart was successfully emptied|[EmptySuccessResponse](#schemaemptysuccessresponse)|
-|401|[Unauthorized](https://tools.ietf.org/html/rfc7235#section-3.1)|Unauthorized (when no user matching authorization header is found)|[CartResponse](#schemacartresponse)|
-|403|[Forbidden](https://tools.ietf.org/html/rfc7231#section-6.5.3)|Forbidden (when authorization header is missing)|[CartResponse](#schemacartresponse)|
+|401|[Unauthorized](https://tools.ietf.org/html/rfc7235#section-3.1)|Unauthorized (when no token is found or Header x-user-id is missing or no user with such id)|[CartResponse](#schemacartresponse)|
+|403|[Forbidden](https://tools.ietf.org/html/rfc7231#section-6.5.3)|Forbidden (when user isn't admin)|[CartResponse](#schemacartresponse)|
|500|[Internal Server Error](https://tools.ietf.org/html/rfc7231#section-6.6.1)|Internal server error|[CartResponse](#schemacartresponse)|
-
-This operation does not require authentication
+
+To perform this operation, you must be authenticated by means of one of the following methods:
+bearerAuth
## post__api_profile_cart_checkout
> Code samples
-```http
-POST /api/profile/cart/checkout HTTP/1.1
-
-Accept: application/json
-x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
-
-```
-
-```http
-POST /api/profile/cart/checkout HTTP/1.1
-
-Accept: application/json
-x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
-
-```
-
`POST /api/profile/cart/checkout`
*Create an order*
-Parameters
-
-|Name|In|Type|Required|Description|
-|---|---|---|---|---|
-|x-user-id|header|string(uuid)|true|User id (uuid)|
-
> Example responses
> 200 Response
@@ -391,13 +317,13 @@ x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
{
"data": {
"order": {
- "id": "6c36d6fa-f694-4f9c-9b2c-6f7049d38f4a",
- "userId": "6dc52b3c-de7e-431a-84b8-0ec56e0774d4",
- "cartId": "cadff0c5-0079-4db8-b6bf-84c9c2633ca3",
+ "id": "654664c3159ab6e8bb59f912",
+ "userId": "654660aed551a02ee536fe4c",
+ "cartId": "65466369efd3f9a3ddf5f223",
"items": [
{
"product": {
- "id": "5c293ad0-19d0-41ee-baa3-4c648f9f7697",
+ "id": "65426846103aa5e276433519",
"title": "Book",
"description": "Interesting book",
"price": 200
@@ -406,7 +332,7 @@ x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
},
{
"product": {
- "id": "afdd68c4-d359-45e6-b9fd-c8fdb2a162a0",
+ "id": "65426846103aa5e276433518",
"title": "Pen",
"description": "Cute pen",
"price": 20
@@ -449,7 +375,7 @@ x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
{
"data": null,
"error": {
- "message": "User is not authorized"
+ "message": "Token is required"
}
}
```
@@ -460,7 +386,7 @@ x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
{
"data": null,
"error": {
- "message": "You must be authorized user"
+ "message": "Invalid Token"
}
}
```
@@ -482,46 +408,25 @@ x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
|---|---|---|---|
|200|[OK](https://tools.ietf.org/html/rfc7231#section-6.3.1)|Successful operation|[CheckoutResponse](#schemacheckoutresponse)|
|400|[Bad Request](https://tools.ietf.org/html/rfc7231#section-6.5.1)|Bad request|[CartResponse](#schemacartresponse)|
-|401|[Unauthorized](https://tools.ietf.org/html/rfc7235#section-3.1)|Unauthorized (when no user matching authorization header is found)|[CartResponse](#schemacartresponse)|
-|403|[Forbidden](https://tools.ietf.org/html/rfc7231#section-6.5.3)|Forbidden (when authorization header is missing)|[CartResponse](#schemacartresponse)|
+|401|[Unauthorized](https://tools.ietf.org/html/rfc7235#section-3.1)|Unauthorized (when no token is found)|[CartResponse](#schemacartresponse)|
+|403|[Forbidden](https://tools.ietf.org/html/rfc7231#section-6.5.3)|Forbidden (when token is missed or invalid)|[CartResponse](#schemacartresponse)|
|500|[Internal Server Error](https://tools.ietf.org/html/rfc7231#section-6.6.1)|Internal server error|[CartResponse](#schemacartresponse)|
-
-This operation does not require authentication
+
+To perform this operation, you must be authenticated by means of one of the following methods:
+bearerAuth
-product
+product
## get__api_products
> Code samples
-```http
-GET /api/products HTTP/1.1
-
-Accept: application/json
-x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
-
-```
-
-```http
-GET /api/products HTTP/1.1
-
-Accept: application/json
-x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
-
-```
-
`GET /api/products`
*Returns a list of products*
-Parameters
-
-|Name|In|Type|Required|Description|
-|---|---|---|---|---|
-|x-user-id|header|string(uuid)|true|User id (uuid)|
-
> Example responses
> 200 Response
@@ -530,13 +435,13 @@ x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
{
"data": [
{
- "id": "5c293ad0-19d0-41ee-baa3-4c648f9f7697",
+ "id": "65426846103aa5e276433519",
"title": "Book",
"description": "Interesting book",
"price": 200
},
{
- "id": "afdd68c4-d359-45e6-b9fd-c8fdb2a162a0",
+ "id": "a65426846103aa5e276433518",
"title": "Pen",
"description": "Cute pen",
"price": 20
@@ -552,7 +457,7 @@ x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
{
"data": null,
"error": {
- "message": "User is not authorized"
+ "message": "Token is required"
}
}
```
@@ -563,7 +468,7 @@ x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
{
"data": null,
"error": {
- "message": "You must be authorized user"
+ "message": "Invalid Token"
}
}
```
@@ -584,8 +489,8 @@ x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
|Status|Meaning|Description|Schema|
|---|---|---|---|
|200|[OK](https://tools.ietf.org/html/rfc7231#section-6.3.1)|Returns a list of all products available|Inline|
-|401|[Unauthorized](https://tools.ietf.org/html/rfc7235#section-3.1)|Unauthorized (when no user matching authorization header is found)|[CartResponse](#schemacartresponse)|
-|403|[Forbidden](https://tools.ietf.org/html/rfc7231#section-6.5.3)|Forbidden (when authorization header is missing)|[CartResponse](#schemacartresponse)|
+|401|[Unauthorized](https://tools.ietf.org/html/rfc7235#section-3.1)|Unauthorized (when no token is found)|[CartResponse](#schemacartresponse)|
+|403|[Forbidden](https://tools.ietf.org/html/rfc7231#section-6.5.3)|Forbidden (when token is missed or invalid)|[CartResponse](#schemacartresponse)|
|500|[Internal Server Error](https://tools.ietf.org/html/rfc7231#section-6.6.1)|Internal server error|[CartResponse](#schemacartresponse)|
Response Schema
@@ -603,30 +508,15 @@ Status Code **200**
|» error|[ErrorResponse](#schemaerrorresponse)¦null|false|none|none|
|»» message|string|false|none|none|
-
-This operation does not require authentication
+
+To perform this operation, you must be authenticated by means of one of the following methods:
+bearerAuth
## get__api_products_{productId}
> Code samples
-```http
-GET /api/products/{productId} HTTP/1.1
-
-Accept: application/json
-x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
-
-```
-
-```http
-GET /api/products/{productId} HTTP/1.1
-
-Accept: application/json
-x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
-
-```
-
`GET /api/products/{productId}`
*Returns single product*
@@ -635,8 +525,7 @@ x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
|Name|In|Type|Required|Description|
|---|---|---|---|---|
-|productId|path|number|true|Id (uuid) of product to return|
-|x-user-id|header|string(uuid)|true|User id (uuid)|
+|productId|path|number|true|Id of product to return|
> Example responses
@@ -645,7 +534,7 @@ x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
```json
{
"data": {
- "id": "5c293ad0-19d0-41ee-baa3-4c648f9f7697",
+ "id": "65426846103aa5e276433519",
"title": "Book",
"description": "Interesting book",
"price": 200
@@ -660,7 +549,7 @@ x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
{
"data": null,
"error": {
- "message": "User is not authorized"
+ "message": "Token is required"
}
}
```
@@ -671,7 +560,7 @@ x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
{
"data": null,
"error": {
- "message": "You must be authorized user"
+ "message": "Invalid Token"
}
}
```
@@ -703,11 +592,202 @@ x-user-id: eb5a26af-6e4c-4f31-a9b1-3450d42ac66c
|Status|Meaning|Description|Schema|
|---|---|---|---|
|200|[OK](https://tools.ietf.org/html/rfc7231#section-6.3.1)|Successful operation|[ProductResponse](#schemaproductresponse)|
-|401|[Unauthorized](https://tools.ietf.org/html/rfc7235#section-3.1)|Unauthorized (when no user matching authorization header is found)|[CartResponse](#schemacartresponse)|
-|403|[Forbidden](https://tools.ietf.org/html/rfc7231#section-6.5.3)|Forbidden (when authorization header is missing)|[CartResponse](#schemacartresponse)|
+|401|[Unauthorized](https://tools.ietf.org/html/rfc7235#section-3.1)|Unauthorized (when no token is found)|[CartResponse](#schemacartresponse)|
+|403|[Forbidden](https://tools.ietf.org/html/rfc7231#section-6.5.3)|Forbidden (when token is missed or invalid)|[CartResponse](#schemacartresponse)|
|404|[Not Found](https://tools.ietf.org/html/rfc7231#section-6.5.4)|Not found|[CartResponse](#schemacartresponse)|
|500|[Internal Server Error](https://tools.ietf.org/html/rfc7231#section-6.6.1)|Internal server error|[CartResponse](#schemacartresponse)|
+
+To perform this operation, you must be authenticated by means of one of the following methods:
+bearerAuth
+
+
+user
+
+## post__login
+
+> Code samples
+
+`POST /login`
+
+*Login user*
+
+> Body parameter
+
+```json
+{
+ "email": "test2@gmail.com",
+ "password": 123456789
+}
+```
+
+Parameters
+
+|Name|In|Type|Required|Description|
+|---|---|---|---|---|
+|body|body|[LoginUserRequestBody](#schemaloginuserrequestbody)|false|none|
+
+> Example responses
+
+> 200 Response
+
+```json
+{
+ "token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VyX2lkIjoiNjU0NjYwYWVkNTUxYTAyZWU1MzZmZTRjIiwiZW1haWwiOiJ0ZXN0MkBnbWFpbC5jb20iLCJyb2xlIjoiY3VzdG9tZXIiLCJpYXQiOjE2OTkxMTE1NTUsImV4cCI6MTY5OTExODc1NX0.2UkbA0U464r2WfKN6RMWvhMzc3wVo71dq6rKvUmoVTs"
+}
+```
+
+> 400 Response
+
+```json
+{
+ "data": null,
+ "error": {
+ "message": "Cart is empty"
+ }
+}
+```
+
+> 401 Response
+
+```json
+{
+ "data": null,
+ "error": {
+ "message": "Token is required"
+ }
+}
+```
+
+> 403 Response
+
+```json
+{
+ "data": null,
+ "error": {
+ "message": "Invalid Token"
+ }
+}
+```
+
+> 500 Response
+
+```json
+{
+ "data": null,
+ "error": {
+ "message": "Internal Server error"
+ }
+}
+```
+
+Responses
+
+|Status|Meaning|Description|Schema|
+|---|---|---|---|
+|200|[OK](https://tools.ietf.org/html/rfc7231#section-6.3.1)|User is logined|Inline|
+|400|[Bad Request](https://tools.ietf.org/html/rfc7231#section-6.5.1)|Bad request|[CartResponse](#schemacartresponse)|
+|401|[Unauthorized](https://tools.ietf.org/html/rfc7235#section-3.1)|Unauthorized (when no token is found)|[CartResponse](#schemacartresponse)|
+|403|[Forbidden](https://tools.ietf.org/html/rfc7231#section-6.5.3)|Forbidden (when token is missed or invalid)|[CartResponse](#schemacartresponse)|
+|500|[Internal Server Error](https://tools.ietf.org/html/rfc7231#section-6.6.1)|Internal server error|[CartResponse](#schemacartresponse)|
+
+Response Schema
+
+Status Code **200**
+
+|Name|Type|Required|Restrictions|Description|
+|---|---|---|---|---|
+|» token|string|false|none|none|
+
+
+This operation does not require authentication
+
+
+## post__register
+
+> Code samples
+
+`POST /register`
+
+*Register user*
+
+> Body parameter
+
+```json
+{
+ "email": "test2@gmail.com",
+ "password": 123456789,
+ "name": "Name",
+ "isAdmin": true
+}
+```
+
+Parameters
+
+|Name|In|Type|Required|Description|
+|---|---|---|---|---|
+|body|body|[RegisterUserRequestBody](#schemaregisteruserrequestbody)|false|none|
+
+> Example responses
+
+> 200 Response
+
+> 400 Response
+
+```json
+{
+ "data": null,
+ "error": {
+ "message": "Cart is empty"
+ }
+}
+```
+
+> 401 Response
+
+```json
+{
+ "data": null,
+ "error": {
+ "message": "Token is required"
+ }
+}
+```
+
+> 403 Response
+
+```json
+{
+ "data": null,
+ "error": {
+ "message": "Invalid Token"
+ }
+}
+```
+
+> 500 Response
+
+```json
+{
+ "data": null,
+ "error": {
+ "message": "Internal Server error"
+ }
+}
+```
+
+Responses
+
+|Status|Meaning|Description|Schema|
+|---|---|---|---|
+|200|[OK](https://tools.ietf.org/html/rfc7231#section-6.3.1)|User is registered|None|
+|400|[Bad Request](https://tools.ietf.org/html/rfc7231#section-6.5.1)|Bad request|[CartResponse](#schemacartresponse)|
+|401|[Unauthorized](https://tools.ietf.org/html/rfc7235#section-3.1)|Unauthorized (when no token is found)|[CartResponse](#schemacartresponse)|
+|403|[Forbidden](https://tools.ietf.org/html/rfc7231#section-6.5.3)|Forbidden (when token is missed or invalid)|[CartResponse](#schemacartresponse)|
+|500|[Internal Server Error](https://tools.ietf.org/html/rfc7231#section-6.6.1)|Internal server error|[CartResponse](#schemacartresponse)|
+
+Response Schema
+
This operation does not require authentication
@@ -723,11 +803,11 @@ This operation does not require authentication
```json
{
- "id": "dd5ec5ab-deaa-419c-8a6b-7e67b1f7ec87",
+ "id": "654660f1d551a02ee536fe53",
"items": [
{
"product": {
- "id": "5c293ad0-19d0-41ee-baa3-4c648f9f7697",
+ "id": "65426846103aa5e276433519",
"title": "Book",
"description": "Interesting book",
"price": 200
@@ -743,7 +823,7 @@ This operation does not require authentication
|Name|Type|Required|Restrictions|Description|
|---|---|---|---|---|
-|id|string|false|none|Cart id (uuid)|
+|id|string|false|none|Cart id|
|items|[[CartItem](#schemacartitem)]|false|none|Items added to cart|
CartItem
@@ -756,7 +836,7 @@ This operation does not require authentication
```json
{
"product": {
- "id": "5c293ad0-19d0-41ee-baa3-4c648f9f7697",
+ "id": "65426846103aa5e276433519",
"title": "Book",
"description": "Interesting book",
"price": 200
@@ -782,7 +862,7 @@ This operation does not require authentication
```json
{
- "id": "5c293ad0-19d0-41ee-baa3-4c648f9f7697",
+ "id": "65426846103aa5e276433519",
"title": "Book",
"description": "Interesting book",
"price": 200
@@ -814,7 +894,7 @@ This operation does not require authentication
"items": [
{
"product": {
- "id": "5c293ad0-19d0-41ee-baa3-4c648f9f7697",
+ "id": "65426846103aa5e276433519",
"title": "Book",
"description": "Interesting book",
"price": 200
@@ -868,11 +948,11 @@ This operation does not require authentication
{
"data": {
"cart": {
- "id": "dd5ec5ab-deaa-419c-8a6b-7e67b1f7ec87",
+ "id": "654660f1d551a02ee536fe53",
"items": [
{
"product": {
- "id": "5c293ad0-19d0-41ee-baa3-4c648f9f7697",
+ "id": "65426846103aa5e276433519",
"title": "Book",
"description": "Interesting book",
"price": 200
@@ -916,7 +996,7 @@ This operation does not require authentication
"items": [
{
"product": {
- "id": "5c293ad0-19d0-41ee-baa3-4c648f9f7697",
+ "id": "65426846103aa5e276433519",
"title": "Book",
"description": "Interesting book",
"price": 200
@@ -963,7 +1043,7 @@ This operation does not require authentication
```json
{
"data": {
- "id": "5c293ad0-19d0-41ee-baa3-4c648f9f7697",
+ "id": "65426846103aa5e276433519",
"title": "Book",
"description": "Interesting book",
"price": 200
@@ -993,7 +1073,7 @@ This operation does not require authentication
{
"data": [
{
- "id": "5c293ad0-19d0-41ee-baa3-4c648f9f7697",
+ "id": "65426846103aa5e276433519",
"title": "Book",
"description": "Interesting book",
"price": 200
@@ -1022,7 +1102,7 @@ This operation does not require authentication
```json
{
- "productId": "915b2f40-9fd9-47f2-9b51-628f3dc69aac",
+ "productId": "65426846103aa5e276433519",
"count": 5
}
@@ -1057,6 +1137,54 @@ This operation does not require authentication
|email|string|false|none|none|
|password|string|false|none|none|
+LoginUserRequestBody
+
+RegisterUserRequestBody
+
+EmptySuccessResponse