pawap90 / uade-movie-api Goto Github PK

The endpoint will receive the body, extract the account id from the jwt, and insert everything on the rates collection.

Route: api/rate
Method: POST
Requires authorization
Body:

• MediaType (string: 'movie' or 'series')
• MediaId (Number)
• Rating (Number - 1 to 10)
• Comment (string)

The account id can be retrieved from the jwt.

Rate model:

• Account Id (ObjectId - required)
• MediaType (string - required)
• MediaId (Number - required)
• Rating (Number - required)
• Comment (string - required)

Build authorization middleware that verifies the JWT from the Authorization header.

The endpoint will receive the media type and id through the route params, extract the account id from the jwt, get all rates for the specified media (movie or series) and set ratedByMe=true on the rates that were created by the current user.

Route: api/rate/:mediaType/:mediaId
Method: GET
Requires authorization

The account id must be retrieved from the jwt.

Requires auth
Receives the current and new password.
If the current password is valid, updates the new password

When creating a new list, the "isDefault" property should be set to "false".

Endpoint: /api/account/register
Method: POST
Body: Receives email, name, lastName, password, genres (string array)
Inserts the account info into the account collection
The endpoint doesn't return any data

Note: The account model must be updated to store an array of genres

Also add the swagger documentation

Add swagger documentation

Returns the current user's lists.
The endpoint will extract the account id from the jwt and search the list collection for lists that match the account id.

Route: api/list
Method: GET
Requires authorization

The account id can be retrieved from the jwt.

Removes a media item from the specified list (:listId).
The endpoint will receive the list id in the route params, extract the account id from the jwt, and remove the received media item from the specified list.

Note: Must validate that the current user owns the specified list (one user cannot modify another user's lists).

Route: api/list/:listId/item/:mediaType/:mediaId
Method: DELETE
Requires authorization

The account id can be retrieved from the jwt.

Adds a media item to the current user's default list.
The endpoint will receive the media item in the body, extract the account id from the jwt, and add the received media item to the current user's default list.

Route: api/list/item
Method: POST
Requires authorization
Body:

• mediaType (string: 'movie' or 'series')
• mediaId (Number)
• mediaTitle
• mediaDescription,
• mediaImagePath,
• mediaGenres (string array),
• mediaYear

The account id can be retrieved from the jwt.

The endpoint will receive the list data on the body, extract the account id from the jwt and insert a new list with empty media items on the list collection.

Route: api/list
Method: POST
Body:

• name
• isPublic

Requires authorization

The account id must be retrieved from the jwt.

Also create the list model:

    - isDefault 
    - name 
    - accountId
    - isPublic
    - mediaItems: [
        {
            type
            id,
            title,
            description,
            imagePath,
            genres (string array),
            year
        }
    ]

The endpoint will receive the list data on the body, the list id on the route params, extract the account id from the jwt and update the specified list's data.

Note: Must validate that the current user owns the specified list (one user cannot modify another user's lists).

Route: api/list/:listId
Method: PUT
Body:

• name
• isPublic

Requires authorization

The account id must be retrieved from the jwt.

The endpoint will receive the list id on the route params, extract the account id from the jwt and delete the specified list.

Note: Must validate that the current user owns the specified list (one user cannot modify another user's lists).

Route: api/list/:listId
Method: DELETE

Requires authorization

The account id must be retrieved from the jwt.

The endpoint will allow the current user to update their account data.

Route: api/account
Method: PUT
Requires authorization
Body:
name, lastName, genres

The account id can be retrieved from the jwt.

Throw Confict (409) instead of BadRequest when the email already exists in the account collection

Enter email and password, authorize and get JWT

Adds a media item to the specified list (:listId).
The endpoint will receive the list id in the route params, the media item in the body, extract the account id from the jwt. Finally it will add the provided media item into the specified list id.

Note: Must validate that the current user owns the specified list (one user cannot modify another user's lists).

Route: api/list/:listId/item
Method: POST
Requires authorization

The account id can be retrieved from the jwt.