Team members:

• s123456 Mannella Luca
• s123457 Sáenz Moreno Juan Pablo
• s123458 Servetti Antonio

A general description of the BigLab 2 is avaible in the course-materials repository, under labs. In the same repository, you can find the instructions for GitHub Classroom, covering BigLabs and exam sessions.

Once you cloned this repository, please write the group name and names of the members of the group in the above section.

In the client directory, do NOT create a new folder for the project, i.e., client should directly contain the public and src folders and the package.json files coming from BigLab1.

When committing on this repository, please, do NOT commit the node_modules directory, so that it is not pushed to GitHub. This should be already automatically excluded from the .gitignore file, but double-check.

When another member of the team pulls the updated project from the repository, remember to run npm install in the project directory to recreate all the Node.js dependencies locally, in the node_modules folder. Remember that npm install should be executed inside the client and server folders (not in the BigLab2 root directory).

Finally, remember to add the final tag for the final submission, otherwise it will not be graded.

Here you can find a list of the users already registered inside the provided database. This information will be used during the fourth week, when you will have to deal with authentication. If you decide to add additional users, please remember to add them to this table (with plain-text password)!

Provide a short description for API with the required parameters, follow the proposed structure.

• [HTTP Method] [URL, with any parameter]
• [One-line about what this API is doing]
• [Sample request, with body (if any)]
• [Sample response, with body (if any)]
• [Error responses, if any]

• HTTP method: GET URL: /api/films
• Description: Get the full list of films or the films that match the query filter parameter, and belong to the logged user
• Request body: None
• Request query parameter: filter name of the filter to apply (filter-all, filter-favorite, filter-best, filter-lastmonth, filter-unseen)
• Response: 200 OK (success)
• Response body: Array of objects, each describing one film:

[
  {
    "id": 1,
    "title": "Pulp Fiction",
    "favorite": 1,
    "watchDate": "2022-03-11",
    "rating": 5,
    "user": 1
  },
  {
    "id": 2,
    "title": "21 Grams",
    "favorite": 1,
    "watchDate": "2022-03-17",
    "rating": 4,
    "user": 1
  },
  ...
]

• Error responses: 500 Internal Server Error (generic error)

• HTTP method: GET URL: /api/films/:id
• Description: Get the film corresponding to the id (if it belongs to the current logged user)
• Request body: None
• Response: 200 OK (success)
• Response body: One object describing the required film:

[
  {
    "id": 2,
    "title": "21 Grams",
    "favorite": 1,
    "watchDate": "2022-03-17",
    "rating": 4,
    "user": 1
  }
]

• Error responses: 500 Internal Server Error (generic error), 404 Not Found (not present or unavailable)

• HTTP method: POST URL: /api/films
• Description: Add a new film to the films of the logged user
• Request body: description of the object to add (user propery, if present, is ignored and substituted with the id of the logged user, film id value is not required and is ignored)

{
    "id": 2,
    "title": "21 Grams",
    "favorite": 1,
    "watchDate": "2022-03-17",
    "rating": 4,
    "user": 1
}

• Response: 200 OK (success)

• Response body: the object as represented in the database

• Error responses: 422 Unprocessable Entity (values do not satisfy validators), 503 Service Unavailable (database error)

• HTTP method: PUT URL: /api/films/:id
• Description: Update values of an existing film (except the id) of the logged user
• Request body: description of the object to update

{
    "id": 2,
    "title": "21 Grams",
    "favorite": 1,
    "watchDate": "2022-03-17",
    "rating": 4,
    "user": 1
}

• Response: 200 OK (success)

• Response body: the object as represented in the database

• Error responses: 422 Unprocessable Entity (values do not satisfy validators), 503 Service Unavailable (database error)

• HTTP method: DELETE URL: /api/films/:id

• Description: Delete an existing film of the logged user

• Request body: None

• Response: 200 OK (success)

• Response body: an empty object

• Error responses: 503 Service Unavailable (database error)

• HTTP method: PUT URL: /api/films/:id/favorite
• Description: Update favorite property value of an existing film of the logged user
• Request body: value of the favorite property

{
    "id": 2,
    "favorite": 1,
}

• Response: 200 OK (success)

• Response body: the object as represented in the database

• Error responses: 422 Unprocessable Entity (values do not satisfy validators), 503 Service Unavailable (database error)

• HTTP method: GET URL: /api/filters
• Description: Get the object that describes the filters
• Request body: None
• Response: 200 OK (success)
• Response body: An object with ids of the filters as key

{
  "filter-all": {
    "label": "All",
    "id": "filter-all"
  },
  "filter-favorite": {
    "label": "Favorites",
    "id": "filter-favorite"
  },
  "filter-best": {
    "label": "Best Rated",
    "id": "filter-best"
  },
  "filter-lastmonth": {
    "label": "Seen Last Month",
    "id": "filter-lastmonth"
  },
  "filter-unseen": {
    "label": "Unseen",
    "id": "filter-unseen"
  }
}

• HTTP method: POST URL: /api/sessions
• Description: authenticate the user who is trying to login
• Request body: credentials of the user who is trying to login

{
    "username": "username",
    "password": "password"
}

• Response: 200 OK (success)
• Response body: authenticated user

{
    "id": 1,
    "username": "[email protected]", 
    "name": "John"
}

• Error responses: 500 Internal Server Error (generic error), 401 Unauthorized User (login failed)

• HTTP method: GET URL: /api/sessions/current

• Description: check if current user is logged in and get her data

• Request body: None

• Response: 200 OK (success)

• Response body: authenticated user

{
    "id": 1,
    "username": "[email protected]", 
    "name": "John"
}

• Error responses: 500 Internal Server Error (generic error), 401 Unauthorized User (user is not logged in)

• HTTP method: DELETE URL: /api/sessions/current

• Description: logout current user

• Request body: None

• Response: 200 OK (success)

• Response body: None

• Error responses: 500 Internal Server Error (generic error), 401 Unauthorized User (user is not logged in)