Blog API

A RESTful API for a blogging platform with user authentication, email verification, and full CRUD for blog posts.

---

🚀 Features

• User Registration & Login (JWT authentication, cookie-based)
• Email Verification via OTP
• Logout
• Healthcheck Endpoint
• CRUD for Blog Posts
  • Create, Read (all/single), Update, Delete
  • Only the post owner can update or delete their post
• Tags (basic support in post model)

---

🛠️ Tech Stack

• Backend: Node.js, Express
• Database: MongoDB (Mongoose)
• Auth: JWT, bcryptjs, cookie-based sessions
• Email: Nodemailer (Brevo/Sendinblue SMTP)
• Other: dotenv, cors, helmet, morgan

---

📦 Getting Started

1. Clone the repository

   git clone https://github.com/your-username/blog-api.git
   cd blog-api

2. Install dependencies

   npm install

3. Configure environment variables

   Create a .env file in the root directory with the following:

   PORT=4000
   MONGODB_URI=your_mongodb_connection_string
   JWT_SECRET=your_jwt_secret
   CORS_ORIGIN=http://localhost:3000
   SMTP_USER=your_brevo_user
   SMTP_PASS=your_brevo_pass
   [email protected]
   NODE_ENV=development
   

4. Start the server

   npm start

   The API will run on http://localhost:4000 by default.

---

📚 API Endpoints

Auth

• POST /api/v1/auth/register — Register a new user
• POST /api/v1/auth/login — Login and receive JWT in cookie
• POST /api/v1/auth/logout — Logout user
• POST /api/v1/auth/send-verify-otp — Send email verification OTP (requires login)
• POST /api/v1/auth/verify-account — Verify email with OTP (requires login)

Healthcheck

• GET /api/v1/healthcheck — Check if API is running

Posts

• POST /api/v1/posts — Create a post (requires login)
• GET /api/v1/posts — List all posts
• GET /api/v1/posts/:id — Get a single post
• PUT /api/v1/posts/:id — Update a post (owner only, requires login)
• DELETE /api/v1/posts/:id — Delete a post (owner only, requires login)

---

🧪 Testing

Use Postman or similar tools to test the endpoints.

• Register and login to receive the token cookie.
• Use the same tab/session for all requests to keep cookies.
• Only the post owner can update or delete their post.

---

📄 License

MIT

---

Happy coding!