tinkerhub · rose-francis · Feb 1, 2025 · Feb 1, 2025 · Feb 1, 2025 · Feb 1, 2025
diff --git a/backend/.gitignore b/backend/.gitignore
@@ -0,0 +1,25 @@
+# Virtual environment
+venv/
+
+# Python cache files
+__pycache__/
+*.pyc
+*.pyo
+*.pyd
+
+# Logs & temp files
+*.log
+*.tmp
+*.swp
+*.swo
+
+# IDE/Editor files
+.vscode/
+.idea/
+
+# Environment variables (if needed)
+.env
+
+# OS-specific files
+.DS_Store
+Thumbs.db
diff --git a/backend/app/main.py b/backend/app/main.py
@@ -0,0 +1,24 @@
+from fastapi import FastAPI
+from fastapi.middleware.cors import CORSMiddleware
+from app.routes import auth, donor, organisation
+
+app = FastAPI()
+
+# CORS Middleware Configuration (Allow React Frontend to Access API)
+app.add_middleware(
+    CORSMiddleware,
+    allow_origins=["http://localhost:3000"],  # React frontend URL
+    allow_credentials=True,
+    allow_methods=["*"],  # Allow all HTTP methods (GET, POST, PUT, DELETE, etc.)
+    allow_headers=["*"],  # Allow all headers (e.g., Authorization, Content-Type)
+)
-app.add_middleware(
-    CORSMiddleware,
-    allow_origins=["http://localhost:3000"],  # React frontend URL
-    allow_credentials=True,
-    allow_methods=["*"],  # Allow all HTTP methods (GET, POST, PUT, DELETE, etc.)
-    allow_headers=["*"],  # Allow all headers (e.g., Authorization, Content-Type)
-)
+from typing import List
+from app.config import settings  # Create this file to manage environment variables
+
+app.add_middleware(
+    CORSMiddleware,
+    allow_origins=settings.ALLOWED_ORIGINS,  # List of allowed origins from environment
+    allow_credentials=True,
+    allow_methods=["GET", "POST", "PUT", "DELETE"],
+    allow_headers=["Authorization", "Content-Type"],
+)
-app.add_middleware(
-    CORSMiddleware,
-    allow_origins=["http://localhost:3000"],  # React frontend URL
-    allow_credentials=True,
-    allow_methods=["*"],  # Allow all HTTP methods (GET, POST, PUT, DELETE, etc.)
-    allow_headers=["*"],  # Allow all headers (e.g., Authorization, Content-Type)
-)
+from typing import List
+from app.config import settings  # Create this file to manage environment variables
+
+app.add_middleware(
+    CORSMiddleware,
+    allow_origins=settings.ALLOWED_ORIGINS,  # List of allowed origins from environment
+    allow_credentials=True,
+    allow_methods=["GET", "POST", "PUT", "DELETE"],
+    allow_headers=["Authorization", "Content-Type"],
+)
+
+# Include API routers
+app.include_router(auth.router, prefix="/auth", tags=["Auth"])
+app.include_router(donor.router, prefix="/donor", tags=["Donor"])
+app.include_router(organisation.router, prefix="/organisation", tags=["Organisation"])
+
+# Test Endpoint to check if backend is running
+@app.get("/")
+def home():
+    return {"message": "Welcome to the FastAPI Backend (No Database)"}
diff --git a/backend/app/routes/auth.py b/backend/app/routes/auth.py
@@ -0,0 +1,75 @@
+from fastapi import APIRouter, HTTPException, Depends
+from pydantic import BaseModel
+from passlib.context import CryptContext
+from datetime import datetime, timedelta
+from typing import Optional
+from jose import JWTError, jwt
+
-from fastapi import APIRouter, HTTPException, Depends
-from pydantic import BaseModel
-from passlib.context import CryptContext
-from datetime import datetime, timedelta
-from typing import Optional
-from jose import JWTError, jwt
+from fastapi import APIRouter, HTTPException
+from pydantic import BaseModel
+from passlib.context import CryptContext
+from datetime import datetime, timedelta
+from typing import Optional
+from jose import jwt
+from app.config import settings  # Create this file to manage environment variables
-from fastapi import APIRouter, HTTPException, Depends
-from pydantic import BaseModel
-from passlib.context import CryptContext
-from datetime import datetime, timedelta
-from typing import Optional
-from jose import JWTError, jwt
+from fastapi import APIRouter, HTTPException
+from pydantic import BaseModel
+from passlib.context import CryptContext
+from datetime import datetime, timedelta
+from typing import Optional
+from jose import jwt
+from app.config import settings  # Create this file to manage environment variables
+# FastAPI Router for Authentication
+router = APIRouter()
+
+# Password Hashing
+pwd_context = CryptContext(schemes=["bcrypt"], deprecated="auto")
+
+# In-memory storage (Temporary, use a database in production)
+users = []
+
+# JWT Token Settings
+SECRET_KEY = "your_secret_key_here"  # Replace with a strong secret key
+ALGORITHM = "HS256"
+ACCESS_TOKEN_EXPIRE_MINUTES = 30  # Token expires in 30 minutes
+
+# Pydantic Models
+class UserCreate(BaseModel):
+    name: str
+    email: str
+    password: str
+
+class UserLogin(BaseModel):
+    email: str
+    password: str
+
+class TokenData(BaseModel):
+    email: Optional[str] = None
+
+# Utility Functions
+def create_access_token(data: dict, expires_delta: Optional[timedelta] = None):
+    """Generates a JWT access token."""
+    to_encode = data.copy()
+    expire = datetime.utcnow() + (expires_delta if expires_delta else timedelta(minutes=ACCESS_TOKEN_EXPIRE_MINUTES))
+    to_encode.update({"exp": expire})
+    encoded_jwt = jwt.encode(to_encode, SECRET_KEY, algorithm=ALGORITHM)
+    return encoded_jwt
+
+def verify_password(plain_password, hashed_password):
+    """Verifies if a password matches its hashed version."""
+    return pwd_context.verify(plain_password, hashed_password)
+
+def get_password_hash(password):
+    """Hashes the password."""
+    return pwd_context.hash(password)
+
+# Routes
+
+@router.post("/register")
+def register(user: UserCreate):
+    """Registers a new user."""
+    for u in users:
+        if u["email"] == user.email:
+            raise HTTPException(status_code=400, detail="Email already exists")
+
+    hashed_password = get_password_hash(user.password)
+    new_user = {"name": user.name, "email": user.email, "password": hashed_password}
+    users.append(new_user)
+    return {"message": "User registered successfully"}
-@router.post("/register")
-def register(user: UserCreate):
-    """Registers a new user."""
-    for u in users:
-        if u["email"] == user.email:
-            raise HTTPException(status_code=400, detail="Email already exists")
-
-    hashed_password = get_password_hash(user.password)
-    new_user = {"name": user.name, "email": user.email, "password": hashed_password}
-    users.append(new_user)
-    return {"message": "User registered successfully"}
+from fastapi import status, HTTPException
+from pydantic import BaseModel
+
+class UserResponse(BaseModel):
+    name: str
+    email: str
+
+@router.post("/register", response_model=UserResponse, status_code=status.HTTP_201_CREATED)
+async def register(user: UserCreate):
+    """Registers a new user."""
+    for u in users:
+        if u["email"] == user.email:
+            raise HTTPException(
+                status_code=status.HTTP_409_CONFLICT,
+                detail="A user with this email already exists"
+            )
+
+    hashed_password = get_password_hash(user.password)
+    new_user = {"name": user.name, "email": user.email, "password": hashed_password}
+    users.append(new_user)
+    return UserResponse(name=user.name, email=user.email)
-@router.post("/register")
-def register(user: UserCreate):
-    """Registers a new user."""
-    for u in users:
-        if u["email"] == user.email:
-            raise HTTPException(status_code=400, detail="Email already exists")
-
-    hashed_password = get_password_hash(user.password)
-    new_user = {"name": user.name, "email": user.email, "password": hashed_password}
-    users.append(new_user)
-    return {"message": "User registered successfully"}
+from fastapi import status, HTTPException
+from pydantic import BaseModel
+
+class UserResponse(BaseModel):
+    name: str
+    email: str
+
+@router.post("/register", response_model=UserResponse, status_code=status.HTTP_201_CREATED)
+async def register(user: UserCreate):
+    """Registers a new user."""
+    for u in users:
+        if u["email"] == user.email:
+            raise HTTPException(
+                status_code=status.HTTP_409_CONFLICT,
+                detail="A user with this email already exists"
+            )
+
+    hashed_password = get_password_hash(user.password)
+    new_user = {"name": user.name, "email": user.email, "password": hashed_password}
+    users.append(new_user)
+    return UserResponse(name=user.name, email=user.email)
+
+@router.post("/login")
+def login(user: UserLogin):
+    """Logs in a user and returns a JWT token."""
+    for u in users:
+        if u["email"] == user.email and verify_password(user.password, u["password"]):
+            # Create JWT Token
+            access_token = create_access_token(data={"sub": user.email}, expires_delta=timedelta(minutes=ACCESS_TOKEN_EXPIRE_MINUTES))
+            return {"access_token": access_token, "token_type": "bearer"}
+
+    raise HTTPException(status_code=400, detail="Invalid email or password")
-@router.post("/login")
-def login(user: UserLogin):
-    """Logs in a user and returns a JWT token."""
-    for u in users:
-        if u["email"] == user.email and verify_password(user.password, u["password"]):
-            # Create JWT Token
-            access_token = create_access_token(data={"sub": user.email}, expires_delta=timedelta(minutes=ACCESS_TOKEN_EXPIRE_MINUTES))
-            return {"access_token": access_token, "token_type": "bearer"}
-    
-    raise HTTPException(status_code=400, detail="Invalid email or password")
+from fastapi import Request, Depends, HTTPException, status
+from fastapi.security import OAuth2PasswordRequestForm
+from slowapi import Limiter
+from slowapi.util import get_remote_address
+from datetime import timedelta
+
+limiter = Limiter(key_func=get_remote_address)
+
+@router.post("/login")
+@limiter.limit("5/minute")
+async def login(request: Request, form_data: OAuth2PasswordRequestForm = Depends()):
+    """Logs in a user and returns a JWT token."""
+    for u in users:
+        if u["email"] == form_data.username and verify_password(form_data.password, u["password"]):
+            # Create JWT Token
+            access_token = create_access_token(
+                data={"sub": form_data.username},
+                expires_delta=timedelta(minutes=ACCESS_TOKEN_EXPIRE_MINUTES)
+            )
+            return {"access_token": access_token, "token_type": "bearer"}
+    
+    raise HTTPException(
+        status_code=status.HTTP_401_UNAUTHORIZED,
+        detail="Invalid credentials",
+        headers={"WWW-Authenticate": "Bearer"},
+    )
-@router.post("/login")
-def login(user: UserLogin):
-    """Logs in a user and returns a JWT token."""
-    for u in users:
-        if u["email"] == user.email and verify_password(user.password, u["password"]):
-            # Create JWT Token
-            access_token = create_access_token(data={"sub": user.email}, expires_delta=timedelta(minutes=ACCESS_TOKEN_EXPIRE_MINUTES))
-            return {"access_token": access_token, "token_type": "bearer"}
-    
-    raise HTTPException(status_code=400, detail="Invalid email or password")
+from fastapi import Request, Depends, HTTPException, status
+from fastapi.security import OAuth2PasswordRequestForm
+from slowapi import Limiter
+from slowapi.util import get_remote_address
+from datetime import timedelta
+
+limiter = Limiter(key_func=get_remote_address)
+
+@router.post("/login")
+@limiter.limit("5/minute")
+async def login(request: Request, form_data: OAuth2PasswordRequestForm = Depends()):
+    """Logs in a user and returns a JWT token."""
+    for u in users:
+        if u["email"] == form_data.username and verify_password(form_data.password, u["password"]):
+            # Create JWT Token
+            access_token = create_access_token(
+                data={"sub": form_data.username},
+                expires_delta=timedelta(minutes=ACCESS_TOKEN_EXPIRE_MINUTES)
+            )
+            return {"access_token": access_token, "token_type": "bearer"}
+    
+    raise HTTPException(
+        status_code=status.HTTP_401_UNAUTHORIZED,
+        detail="Invalid credentials",
+        headers={"WWW-Authenticate": "Bearer"},
+    )
diff --git a/backend/app/routes/donor.py b/backend/app/routes/donor.py
@@ -0,0 +1,15 @@
+from fastapi import APIRouter
+from pydantic import BaseModel
+
+router = APIRouter()
+donors = []  # In-memory storage
+
+class DonorCreate(BaseModel):
+    name: str
+    age: int
+    contact: str
-class DonorCreate(BaseModel):
-    name: str
-    age: int
-    contact: str
+class DonorCreate(BaseModel):
+    name: str
+    age: int = Field(..., gt=0, lt=150)
+    contact: str = Field(..., regex=r'^\+?1?\d{9,15}$')
-class DonorCreate(BaseModel):
-    name: str
-    age: int
-    contact: str
+class DonorCreate(BaseModel):
+    name: str
+    age: int = Field(..., gt=0, lt=150)
+    contact: str = Field(..., regex=r'^\+?1?\d{9,15}$')
+
+@router.post("/register")
+def register_donor(donor: DonorCreate):
+    donors.append(donor.dict())
+    return {"message": "Donor registered successfully", "donor": donor}
-@router.post("/register")
-def register_donor(donor: DonorCreate):
-    donors.append(donor.dict())
-    return {"message": "Donor registered successfully", "donor": donor}
+@router.get("/")
+def get_donors():
+    return {"donors": donors}
+
+@router.post("/register")
+async def register_donor(donor: DonorCreate):
+    try:
+        donors.append(donor.dict())
+        return {"message": "Donor registered successfully", "donor": donor}
+    except Exception as e:
+        raise HTTPException(status_code=500, detail=str(e))
-@router.post("/register")
-def register_donor(donor: DonorCreate):
-    donors.append(donor.dict())
-    return {"message": "Donor registered successfully", "donor": donor}
+@router.get("/")
+def get_donors():
+    return {"donors": donors}
+
+@router.post("/register")
+async def register_donor(donor: DonorCreate):
+    try:
+        donors.append(donor.dict())
+        return {"message": "Donor registered successfully", "donor": donor}
+    except Exception as e:
+        raise HTTPException(status_code=500, detail=str(e))
diff --git a/backend/app/routes/organisation.py b/backend/app/routes/organisation.py
@@ -0,0 +1,19 @@
+from fastapi import APIRouter
+from pydantic import BaseModel
+
+router = APIRouter()
+organisations = []  # In-memory storage
+
+class OrganisationCreate(BaseModel):
+    name: str
+    description: str
+    contact: str
-class OrganisationCreate(BaseModel):
-    name: str
-    description: str
-    contact: str
+class OrganisationCreate(BaseModel):
+    name: str = Field(..., min_length=1, max_length=100)
+    description: str = Field(..., min_length=10, max_length=1000)
+    contact: str = Field(..., regex=r'^\+?1?\d{9,15}$')
-class OrganisationCreate(BaseModel):
-    name: str
-    description: str
-    contact: str
+class OrganisationCreate(BaseModel):
+    name: str = Field(..., min_length=1, max_length=100)
+    description: str = Field(..., min_length=10, max_length=1000)
+    contact: str = Field(..., regex=r'^\+?1?\d{9,15}$')
+
+@router.post("/register")
+def register_organisation(org: OrganisationCreate):
+    organisations.append(org.dict())
+    return {"message": "Organisation registered successfully", "organisation": org}
+
+@router.get("/")
+def get_organisations():
+    return {"organisations": organisations}
-@router.post("/register")
-def register_organisation(org: OrganisationCreate):
-    organisations.append(org.dict())
-    return {"message": "Organisation registered successfully", "organisation": org}
-
-@router.get("/")
-def get_organisations():
-    return {"organisations": organisations}
+from fastapi import HTTPException
+
+@router.post("/register")
+async def register_organisation(org: OrganisationCreate):
+    try:
+        organisations.append(org.dict())
+        return {"message": "Organisation registered successfully", "organisation": org}
+    except Exception as e:
+        raise HTTPException(status_code=500, detail=str(e))
+
+@router.get("/")
+async def get_organisations():
+    return {"organisations": organisations}
+
+@router.put("/{org_id}")
+async def update_organisation(org_id: int, org: OrganisationCreate):
+    if org_id >= len(organisations):
+        raise HTTPException(status_code=404, detail="Organisation not found")
+    organisations[org_id] = org.dict()
+    return {"message": "Organisation updated successfully"}
+
+@router.delete("/{org_id}")
+async def delete_organisation(org_id: int):
+    if org_id >= len(organisations):
+        raise HTTPException(status_code=404, detail="Organisation not found")
+    organisations.pop(org_id)
+    return {"message": "Organisation deleted successfully"}
-@router.post("/register")
-def register_organisation(org: OrganisationCreate):
-    organisations.append(org.dict())
-    return {"message": "Organisation registered successfully", "organisation": org}
-
-@router.get("/")
-def get_organisations():
-    return {"organisations": organisations}
+from fastapi import HTTPException
+
+@router.post("/register")
+async def register_organisation(org: OrganisationCreate):
+    try:
+        organisations.append(org.dict())
+        return {"message": "Organisation registered successfully", "organisation": org}
+    except Exception as e:
+        raise HTTPException(status_code=500, detail=str(e))
+
+@router.get("/")
+async def get_organisations():
+    return {"organisations": organisations}
+
+@router.put("/{org_id}")
+async def update_organisation(org_id: int, org: OrganisationCreate):
+    if org_id >= len(organisations):
+        raise HTTPException(status_code=404, detail="Organisation not found")
+    organisations[org_id] = org.dict()
+    return {"message": "Organisation updated successfully"}
+
+@router.delete("/{org_id}")
+async def delete_organisation(org_id: int):
+    if org_id >= len(organisations):
+        raise HTTPException(status_code=404, detail="Organisation not found")
+    organisations.pop(org_id)
+    return {"message": "Organisation deleted successfully"}
diff --git a/frontend/.gitignore b/frontend/.gitignore
@@ -0,0 +1,23 @@
+# See https://help.github.com/articles/ignoring-files/ for more about ignoring files.
+
+# dependencies
+/node_modules
+/.pnp
+.pnp.js
+
+# testing
+/coverage
+
+# production
+/build
+
+# misc
+.DS_Store
+.env.local
+.env.development.local
+.env.test.local
+.env.production.local
+
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
diff --git a/frontend/README.md b/frontend/README.md
@@ -0,0 +1,70 @@
+# Getting Started with Create React App
+
+This project was bootstrapped with [Create React App](https://github.com/facebook/create-react-app).
+
+## Available Scripts
+
+In the project directory, you can run:
+
+### `npm start`
+
+Runs the app in the development mode.\
+Open [http://localhost:3000](http://localhost:3000) to view it in your browser.
+
+The page will reload when you make changes.\
+You may also see any lint errors in the console.
+
+### `npm test`
+
+Launches the test runner in the interactive watch mode.\
+See the section about [running tests](https://facebook.github.io/create-react-app/docs/running-tests) for more information.
+
+### `npm run build`
+
+Builds the app for production to the `build` folder.\
+It correctly bundles React in production mode and optimizes the build for the best performance.
+
+The build is minified and the filenames include the hashes.\
+Your app is ready to be deployed!
+
+See the section about [deployment](https://facebook.github.io/create-react-app/docs/deployment) for more information.
+
+### `npm run eject`
+
+**Note: this is a one-way operation. Once you `eject`, you can't go back!**
+
+If you aren't satisfied with the build tool and configuration choices, you can `eject` at any time. This command will remove the single build dependency from your project.
+
+Instead, it will copy all the configuration files and the transitive dependencies (webpack, Babel, ESLint, etc) right into your project so you have full control over them. All of the commands except `eject` will still work, but they will point to the copied scripts so you can tweak them. At this point you're on your own.
+
+You don't have to ever use `eject`. The curated feature set is suitable for small and middle deployments, and you shouldn't feel obligated to use this feature. However we understand that this tool wouldn't be useful if you couldn't customize it when you are ready for it.
+
+## Learn More
+
+You can learn more in the [Create React App documentation](https://facebook.github.io/create-react-app/docs/getting-started).
+
+To learn React, check out the [React documentation](https://reactjs.org/).
+
+### Code Splitting
+
+This section has moved here: [https://facebook.github.io/create-react-app/docs/code-splitting](https://facebook.github.io/create-react-app/docs/code-splitting)
+
+### Analyzing the Bundle Size
+
+This section has moved here: [https://facebook.github.io/create-react-app/docs/analyzing-the-bundle-size](https://facebook.github.io/create-react-app/docs/analyzing-the-bundle-size)
+
+### Making a Progressive Web App
+
+This section has moved here: [https://facebook.github.io/create-react-app/docs/making-a-progressive-web-app](https://facebook.github.io/create-react-app/docs/making-a-progressive-web-app)
+
+### Advanced Configuration
+
+This section has moved here: [https://facebook.github.io/create-react-app/docs/advanced-configuration](https://facebook.github.io/create-react-app/docs/advanced-configuration)
+
+### Deployment
+
+This section has moved here: [https://facebook.github.io/create-react-app/docs/deployment](https://facebook.github.io/create-react-app/docs/deployment)
+
+### `npm run build` fails to minify
+
+This section has moved here: [https://facebook.github.io/create-react-app/docs/troubleshooting#npm-run-build-fails-to-minify](https://facebook.github.io/create-react-app/docs/troubleshooting#npm-run-build-fails-to-minify)