sma-back-springboot

Simple Social Media Application

You can create posts with pictures and you can also comment on them. Before these actions you should login or #

How to use

1. Clone the project
2. Run gradle build in terminal
3. Then start the project using java -Djasypt.encryptor.password=yourpassword -jar /build/libs/*.war
4. For the jasypt encryption secret use your own generated passwords. then use it in application.yml like I did

---

---

APIs

index page: (empty)

/

---

---

Roles:

Role Create: Admin must create roles with authorities before registering new users

/api/user/role/

Example (POST)

{
  "authorities": [
    "OP_ACCESS_USER",
    "OP_EDIT_USER",
    "OP_DELETE_USER"
  ],
  "name": "USER"
}

---

Role Get: Use GET method

/api/user/role/

---

Role Delete: Use DELETE method

/api/user/role/{id}/

• Only users with these authorities have access role apis. Default admin has all authorities defined in application OP_ACCESS_ROLE, OP_ADD_ROLE, OP_DELETE_ROLE

---

---

Users:

User #: Every body can #. use POST method. data transfers in FORM DATA

/api/user/#/

• After successfully signing up, you will get userData in json format in body and two tokens in the header
  • AccessToken: Witch used to give user access to request. it can be used once. When used you will receive a new one in the header
  • RefreshToken: Which used to check and generate new AccessToken. this token has about 2 weeks lifetime after 2 weeks it expires and you should login

---

User login: like #. Use POST method.

/api/user/#/

Example:

{
  "username": "username",
  "password": "password"
}

• After login you will get RefreshToken and AccessToken and user data as well

---

User Update: Like # transfer data using FORM DATA. One important thing is that you also have to pass user id.

POST

/api/user/update/

---

User Delete: DELETE user by passing its id. only admins and the user can delete

/api/user/

Example:

{
    "id": 0
}

---

User GetAll: Use GET method to receive users' info. Only authenticated users can.

/api/user/all/

---

User GetOne: Use GET method to receive a user's info. Only authenticated users can.

/api/user/

Example:

{
    "id": 0
}

---

---

Posts

Posts All: By GET requesting to this api you will get all the posts listed in pagination format

/api/post/

You can also pass some pagination variables in the url to filter posts

---

Posts Create: Use FORM DATA and POST method

/api/post/

also send user_id

---

Posts Delete: Only admin with ``OP_DELETE_POST` and the actual user can delete

/api/post/{id}/

---

Posts GET one:

/api/post/{id}/

---

Posts search: GET method. pass title(required) and content in url

/api/post/search/?title=<your title>&content=<your contetn>

---

---

Comments

Comments Create: Use POST method using json body to save a new comment

/api/post/comment/

Example:

{
  "content": "string",
  "post": {
    "id" : 0
  }
}

• Remember to send post id

---

Comments Delete: Only actual user and the admin with OP_DELETE_COMMENT authority can delete comment. Use DELETE method

/api/post/comment/

Example:

{
  "id": 0,
  "post": {
    "id": 0
  }
}

---

---

---