CommonController

The following API endpoints must be implemented in 'CommonController' class:

1. userProfile - "/userprofile/{userId}"

This endpoint is used to get the details of any user in the Quora Application. This endpoint can be accessed by any user in the application.It should be a GET request

• This endpoint must request the path variable 'userId' as a string for the corresponding user profile to be retrieved and access token of the signed in user as a string in authorization Request Header.

• If the access token provided by the user does not exist in the database throw 'AuthorizationFailedException' with the message code - 'ATHR-001' and message - 'User has not signed in'.

• If the user has signed out, throw "AuthorizationFailedException" with the message code -'ATHR-002' and message - 'User is signed out.Sign in first to get user details' .

• If the user with uuid whose profile is to be retrieved does not exist in the database, throw 'UserNotFoundException' with the message code -'USR-001' and message - 'User with entered uuid does not exist'.

• Else, return all the details of the user from the database in the JSON response with the corresponding HTTP status.

createQuestion endpoint

createQuestion - "/question/create"

This endpoint is used to create a question in the Quora Application which will be shown to all the users. Any user can access this endpoint.

It should be a POST request.

• This endpoint requests for all the attributes in 'QuestionRequest' about the question and access token of the signed in user as a string in the authorization field of the Request Header.
  If the access token provided by the user does not exist in the database throw AuthorizationFailedException with the message code - 'ATHR-001' and message - 'User has not signed in'.

• If the user has signed out, throw 'AuthorizationFailedException' with the message code- 'ATHR-002' and message - 'User is signed out.Sign in first to post a question'.

• Else, save the question information in the database and return the 'uuid' of the question and message 'QUESTION CREATED' in the JSON response with the corresponding HTTP status.

1. signup - "/user/signup"

This endpoint is used to register a new user in the Quora Application. It should be a POST request.

• This endpoint requests for all the attributes in 'SignupUserRequest' about the user.
  If the username provided already exists in the current database, throw ‘SignUpRestrictedException’ with the message code - 'SGR-001' and message - 'Try any other Username, this Username has already been taken'.

• If the email Id provided by the user already exists in the current database, throw ‘SignUpRestrictedException’ with the message code -'SGR-002' and message -'This user has already been registered, try with any other emailId'.

• If the information is provided by a non-existing user, then save the user information in the database and return the 'uuid' of the registered user and message 'USER SUCCESSFULLY REGISTERED' in the JSON response with the corresponding HTTP status.

• Also, make sure to save the password after encrypting it using 'PasswordCryptographyProvider' class given in the stub file.

• when a user signs up using this endpoint then the role of the person will be 'nonadmin' by default. You can add users with 'admin' role only by executing database queries or with pgAdmin.

2. signin - "/user/signin"

This endpoint is used for user authentication. The user authenticates in the application and after successful authentication, JWT token is given to a user.It should be a POST request.

• This endpoint requests for the User credentials to be passed in the authorization field of header as part of Basic authentication. You need to pass "Basic username:password" (where username:password of the String is encoded to Base64 format) in the authorization header.

• If the username provided by the user does not exist, throw "AuthenticationFailedException" with the message code -'ATH-001' and message-'This username does not exist'.

• If the password provided by the user does not match the password in the existing database, throw 'AuthenticationFailedException' with the message code -'ATH-002' and message -'Password failed'.

• If the credentials provided by the user match the details in the database, save the user login information in the database and return the 'uuid' of the authenticated user from 'users' table and message 'SIGNED IN SUCCESSFULLY' in the JSON response with the corresponding HTTP status. Note that 'JwtAccessToken' class has been given in the stub file to generate an access token.

• Also, return the access token in the access_token field of the Response Header, which will be used by the user for any further operation in the Quora Application.

3. signout - "/user/signout"

This endpoint is used to sign out from the Quora Application. The user cannot access any other
endpoint once he is signed out of the application.It should be a POST request.

• This endpoint must request the access token of the signed in user in the authorization field of the Request Header.

• If the access token provided by the user does not exist in the database, throw 'SignOutRestrictedException' with the message code -'SGR-001' and message - 'User is not Signed in'.

• If the access token provided by the user is valid, update the LogoutAt time of the user in the database and return the 'uuid' of the signed out user from 'users' table and message 'SIGNED OUT SUCCESSFULLY' in the JSON response with the corresponding HTTP status.

AdminController

The following API endpoints must be implemented in 'AdminController' class:

1. userDelete - "/admin/user/{userId}"

This endpoint is used to delete a user from the Quora Application. Only an admin is authorized to access this endpoint. It should be a DELETE request.

• This endpoint requests the path variable 'userId' as a string for the corresponding user which is to be deleted from the database and access token of the signed in user as a string in authorization Request Header.

• If the access token provided by the user does not exist in the database throw 'AuthorizationFailedException' with the message code-'ATHR-001' and message -'User has not signed in'.

• If the user has signed out, throw 'AuthorizationFailedException' with the message code- 'ATHR-002' and message - 'User is signed out'.

• If the role of the user is 'nonadmin', throw 'AuthorizationFailedException' with the message code-'ATHR-003' and message - 'Unauthorized Access, Entered user is not an admin'.

• If the user with uuid whose profile is to be deleted does not exist in the database, throw 'UserNotFoundException' with the message code -'USR-001' and message - 'User with entered uuid to be deleted does not exist'.

• Else, delete the records from all the tables related to that user and return 'uuid' of the deleted user from 'users' table and message 'USER SUCCESSFULLY DELETED' in the JSON response with the corresponding HTTP status.