postui_api

Overview

This repository provides a template for building a RESTful API using Go with features like JWT Authentication, rate limiting, Swagger documentation, and database operations using GORM. The application uses the Gin Gonic web framework and is containerized using Docker.

Features

• RESTful API endpoints for CRUD operations.
• JWT Authentication.
• Rate Limiting.
• Swagger Documentation.
• PostgreSQL database integration using GORM.
• Redis cache.
• MongoDB for logging storage.
• Dockerized application for easy setup and deployment.

Folder structure

postui_api/
├── bin
│  └── server
├── cmd
│  └── server
│     └── main.go
├── docker-compose.yml
├── Dockerfile
├── docs
│  ├── docs.go
│  ├── swagger.json
│  └── swagger.yaml
├── go.mod
├── go.sum
├── LICENSE
├── Makefile
├── pkg
│  ├── api
│  │  ├── products.go
│  │  ├── products_test.go
│  │  ├── router.go
│  │  └── user.go
│  ├── auth
│  │  ├── auth.go
│  │  └── auth_test.go
│  ├── cache
│  │  ├── cache.go
│  │  ├── cache_mock.go
│  │  └── cache_test.go
│  ├── database
│  │  ├── db.go
│  │  ├── db_mock.go
│  │  └── db_test.go
│  ├── middleware
│  │  ├── api_key.go
│  │  ├── authenticateJWT.go
│  │  ├── cors.go
│  │  ├── rate_limit.go
│  │  ├── security.go
│  │  └── xss.go
│  └── models
│     ├── product.go
│     └── user.go
├── README.md
├── scripts
│  ├── generate_key
│  └── generate_key.go
└── vendor

Getting Started

Prerequisites

• Go 1.21+
• Docker
• Docker Compose

Installation

1. Clone the repository

git clone https://github.com/araujo88/postui_api

2. Navigate to the directory

cd postui_api

3. Build and run the Docker containers

make up

Please refer to the Makefile if you need to build in the local environment.

Environment Variables

You can set the environment variables in the .env file. Here are some important variables:

• POSTGRES_HOST
• POSTGRES_DB
• POSTGRES_USER
• POSTGRES_PASSWORD
• POSTGRES_PORT
• JWT_SECRET
• API_SECRET_KEY

API Documentation

The API is documented using Swagger and can be accessed at:

http://localhost:8001/swagger/index.html

Usage

Endpoints

• GET /api/v1/products: Get all products.
• GET /api/v1/products/:id: Get a single product by ID.
• POST /api/v1/products: Create a new product.
• PUT /api/v1/products/:id: Update a product.
• DELETE /api/v1/products/:id: Delete a product.
• POST /api/v1/login: Login.
• POST /api/v1/register: Register a new user.

Authentication

To use authenticated routes, you must include the Authorization header with the JWT token.

curl -H "Authorization: Bearer <YOUR_TOKEN>" http://localhost:8001/api/v1/products

Contributing

Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.

End-to-End (E2E) Tests

This project contains end-to-end (E2E) tests to verify the functionality of the API. The tests are written in Python using the pytest framework.

Prerequisites

Before running the tests, ensure you have the following:

• Python 3.x installed
• pip (Python package manager)
• The API service running locally or on a staging server
• API key available

Setup

1. Create a virtual environment (optional but recommended):

python -m venv venv
source venv/bin/activate  # On Windows: venv\Scripts\activate

2. Install dependencies:

pip install -r requirements.txt

The main dependency is requests, but you may need to include it in your requirements.txt file if it's not already listed.

3. Set up the environment variables:

You need to set the BASE_URL and API_KEY as environment variables before running the tests.

For a local API service:

export BASE_URL=http://localhost:8001/api/v1
export API_KEY=your-api-key-here

For a staging server:

export BASE_URL=https://staging-server-url.com/api/v1
export API_KEY=your-api-key-here

On Windows, you can use:

set BASE_URL=http://localhost:8001/api/v1
set API_KEY=your-api-key-here

4. Run the tests:

Once the environment variables are set, you can run the tests using pytest:

pytest test_e2e.py

Test Structure

The tests will perform the following actions:

1. Register a new user and obtain a JWT token.
2. Create a new product in the system.
3. Retrieve all products and verify the created product is present.
4. Retrieve a specific product by its ID.
5. Update the product's details.
6. Delete the product and verify it is no longer accessible.

Each test includes assertions to ensure that the API behaves as expected.