Fritter

Build your own not-quite-Twitter!

Starter Code

This starter code implements users (with login/sessions), and freets so that you may focus on implementing your own design ideas.

The project is structured as follows:

• index.ts sets up the database connection and the Express server
• /freet contains files related to freet concept
  • collection.ts contains freet collection class to wrap around MongoDB database
  • middleware.ts contains freet middleware
  • model.ts contains definition of freet datatype
  • router.ts contains backend freet routes
  • util.ts contains freet utility functions for transforming data returned to the client
• /user contains files related to user concept
  • collection.ts contains user collection class to wrap around MongoDB database
  • middleware.ts contains user middleware
  • model.ts - contains definition of user datatype
  • router.ts - contains backend user routes
  • util.ts contains user utility functions for transforming data returned to the client
• /public contains the code for the frontend (HTML/CSS/browser JS)

Installation

Make a copy of this repository under your personal GitHub account by clicking the Use this template button. Make sure to enable the Include all branches option.

If you did not take 6.031 in Fall 2021 or Spring 2022, to ensure that your machine has the necessary software for the assignment, please follow Steps 1, 2, 5, and 6 on this page from the 6.031 website (now 6.1020).

Setting up the demo branch (optional, but very helpful as a reference!)

• Navigate to the root folder of your cloned repository.
• Run source demo-setup.sh to set up the demo branches.
• Check your local branches with git branch; you should have one new branch, with a new commit.
  • view-demo demos how to extend functionality of a resource
• If everything looks good, run git push --all origin. At this point, you should see the demo branch at https://github.com/<username>/<repo-name>/branches (and the view-demo-code branch can now be deleted!)
• Now, if you navigate to the commit history of this branch (https://github.com/<username>/<repo-name>/commits/<branch-name>), you can click on the "demo:" commit and see exactly what we changed for each demo!

MongoDB Atlas setup

Follow the instructions here to add your fritter project to MongoDB Atlas.

After following the instructions above, you should have copied a secret that looks something like mongodb+srv://xxxxxx:[email protected]/?retryWrites=true&w=majority. Note that this allows complete access to your database, so do not include it anywhere that is pushed to GitHub or any other publicly accessible location.

To allow your local server to connect to the database you just created, create a file named .env in the project's root directory with the contents

MONGO_SRV=mongodb+srv://xxxxxx:[email protected]/?retryWrites=true&w=majority

where the secret is replaced with the one you obtained.

Post-Installation

After finishing setup, we recommend testing both locally running the starter code, and deploying the code to Vercel, to make sure that both work before you run into issues later. The instructions can be found in the following two sections.

Running your code locally

Firstly, open the terminal or command prompt and cd to the directory for this assignment. Before you make any changes, run the command npm install to install all the packages in package.json. You do not need to run this command every time you make any changes, unless you add a new package to the dependencies in package.json.

Finally, to test your changes locally, run the command npm start in the terminal or command prompt and navigate to localhost:3000 and interact with the frontend to test your routes.

Deployment to Vercel

We will be using Vercel to host a publicly accessible deployment of your application.

1. Create a fork of this repository through GitHub. This will create a repository in your GitHub account with a copy of the starter code. You'll use this copy to push your work and to deploy from.

2. Create a Vercel account using your GitHub account.

3. After you log in, go to the project creation page and select Continue with GitHub and give Vercel the permissions it asks for.

4. Find the repository you just created and click Import. For the Framework Preset, choose Other. In the Environment Variables section, add an entry where NAME is MONGO_SRV and VALUE is your MongoDB secret.

5. Click Deploy and you will get a link like https://fritter-starter-abcd.vercel.app/ where you can access your site.

Vercel will automatically deploy the latest version of your code whenever a push is made to the main branch.

Adding new concepts to Fritter

Backend

The data that Fritter stores is divided into modular collections called "resources". The starter code has only two resources, "freets" and "users". The codebase has the following:

• A model file for each resource (e.g. freet/model.ts). This defines the resource's datatype, which defines the resource's backend type, and should be a distilled form of the information this resource holds (as in ADTs). This also defines its schema, which tells MongoDB how to store our resource, and should match with the datatype.
• A collection file for each resource (e.g. freet/collection.ts). This defines operations Fritter might want to perform on the resource. Each operation works on the entire database table (represented by e.g. FreetModel), so you would operate on one Freet by using FreetModel.findOne().
• Routes file (e.g. freet/router.ts). This contains the Fritter backend's REST API routes for freets resource, and interact with the resource collection. All the routes in the file are automatically prefixed by e.g. /api/freets.
• Middleware file (e.g freet/middleware.ts). This contains methods that validate the state of the resource before performing logic for a given API route. For instance isFreetExists in freet/middleware.ts ensures that a freet with given freetId exists in the database

To add a resource or edit functionality of an existing resource:

• Create/modify files in the four above categories, making sure you have one model file, one collection one router file, and one middleware file per resource.
  • It helps to go in the order that they're listed above, starting with the resource's datatype.
• In freet/utils.ts and user/utils.ts there are type definitions for frontend representations of resources, and functions to convert from a backend resource type. Create/modify these as necessary.
  • An example: the frontend type definition for User lacks a password property, because the frontend should never be receiving users' passwords.

Frontend

For this assignment, we provide an extremely basic frontend for users to interact with the backend. Each box (html form) represents exactly one API route, with a textbox for each parameter that the route takes.

To add a new route to the frontend, two components need to be added: a form in public/index.html and a corresponding event handler in public/scripts/index.js. The form will allow the user to input any necessary fields for the route, and the event handler will take the values of these fields and make an API call to your backend.

For example, the form for the user creation route looks like:

<form id="create-user">
    <h3>Create User</h3>
    <div>
        <label for="username">Username:</label>
        <input id="username" name="username">
    </div>
    <div>
        <label for="password">Password:</label>
        <input id="password" name="password">
    </div>
    <input type="submit" value="Create User">
</form>

In public/scripts/user.js, there is an event handler for this form (event handlers are separated in files by concept, currently user.js and freet.js), which makes a POST request to the backend:

function createUser(fields) {
  fetch('/api/users', {method: 'POST', body: JSON.stringify(fields), headers: {'Content-Type': 'application/json'}})
    .then(showResponse)
    .catch(showResponse);
}

Here, fields is a JSON object which contains key/value pairs, where the key is the name associated with the input field in the form and the value is whatever is entered on the frontend. For instance, in the form above, the first input field has name, username, which will be a key in fields object whose value is whatever has been entered as the username on the frontend. Thus, whatever name you attach to any input field is the same name you will can use to access the value entered in that input field from fields object.

To link the form and event handler together, there is an entry in the formsAndHandlers object (the key is the id attribute of the <form> tag and the value is the event handler function) in public/scripts/index.js:

const formsAndHandlers = {
  'create-user': createUser,
  ...
};

MongoDB

MongoDB is how you will be storing the data of your application. It is essentially a document database that stores data as JSON-like objects that have dynamic schema. You can see the current starter code schema in freet/model.ts and user/model.ts.

Mongoose

You will be using Mongoose, a Node.js-Object Data Modeling (ORM) library for MongoDB. This is a NoSQL database, so you aren't constrained to a rigid data model, meaning you can add/remove fields as needed. The application connects to the MongoDB database using Mongoose in index.ts, where you see mongoose.connects(...). After it connects, you will be able to make mongoose queries such as FindOne or deleteMany.

Schemas

In this starter code, we have provided user and freet collections. Each collection has defined schemas in */model.ts. Once you defined a Schema, you must create a Model object out of the schema. The instances of your model are what we call "documents", which is what is stored in collections. Each schema maps to a MongoDB collection and defines the shape and structure of documents in that collection, such as what fields the document has. When a schema is defined, documents in the collection must follow the schema structure. You can read more about documents here.

To create a new Schema, you first need to define an interface which represents the type definition. You can then create a new Schema object by declaring const ExampleSchema = new Schema<Example>(...) where Example is the type definition on the backend. Then, you can create a model like const ExampleModel = model<Example>("Example", ExampleSchema). You can see a more detailed schema in the model.ts files mentioned above.

Validation

Mongoose allows you to use schema validation if you want to ensure that certain fields exist. For example, if you look at freet/model.ts, you will find fields like

  content: {
    type: String,
    required: true
  }

within the schema. This tells us that the content field must have type String, and that it is required for documents in that collection. A freet must have a String type value for the content field to be added to the freets collection.

API routes

The following api routes have already been implemented for you (Make sure to document all the routes that you have added.):

GET /

This renders the index.html file that will be used to interact with the backend

GET /api/freets - Get all the freets

Returns

• An array of all freets sorted in descending order by date modified

GET /api/freets?author=USERNAME - Get freets by author

Returns

• An array of freets created by user with username author

Throws

• 400 if author is not given
• 404 if author is not a recognized username of any user

POST /api/freets - Create a new freet

Body

• content {string} - The content of the freet

Returns

• A success message
• A object with the created freet

Throws

• 403 if the user is not logged in
• 400 If the freet content is empty or a stream of empty spaces
• 413 If the freet content is more than 140 characters long

DELETE /api/freets/:freetId? - Delete an existing freet

Returns

• A success message

Throws

• 403 if the user is not logged in
• 403 if the user is not the author of the freet
• 404 if the freetId is invalid

PUT /api/freets/:freetId? - Update an existing freet

Body

• content {string} - The new content of the freet

Returns

• A success message
• An object with the updated freet

Throws

• 403 if the user is not logged in
• 404 if the freetId is invalid
• 403 if the user is not the author of the freet
• 400 if the new freet content is empty or a stream of empty spaces
• 413 if the new freet content is more than 140 characters long

POST /api/users/session - Sign in user

Body

• username {string} - The user's username
• password {string} - The user's password

Returns

• A success message
• An object with user's details (without password)

Throws

• 403 if the user is already logged in
• 400 if username or password is not in correct format format or missing in the req
• 401 if the user login credentials are invalid

DELETE /api/users/session - Sign out user

Returns

• A success message

Throws

• 403 if user is not logged in

POST /api/users - Create an new user account

Body

• username {string} - The user's username
• password {string} - The user's password

Returns

• A success message
• An object with the created user's details (without password)

Throws

• 403 if there is a user already logged in
• 400 if username or password is in the wrong format
• 409 if username is already in use

PUT /api/users - Update a user's profile

Body (no need to add fields that are not being changed)

• username {string} - The user's username
• password {string} - The user's password

Returns

• A success message
• An object with the update user details (without password)

Throws

• 403 if the user is not logged in
• 400 if username or password is in the wrong format
• 409 if the username is already in use

DELETE /api/users - Delete user

Returns

• A success message

Throws

• 403 if the user is not logged in

GET /api/downfreets?author=USERNAME - Get downfreets by author

Returns

• An array of downfreets created by user with username author

Throws

• 400 if author is not given
• 404 if author is not a recognized username of any user

GET /api/downfreets?freet=freetid - Get downfreets on freet

Returns

• An array of downfreets on freet with freetid

Throws

• 400 if freet is not given
• 404 if freet is not a recognized freet

POST /api/downfreets - Create a new downfreet

Body

• freetid {string} - The freetid being downfreeted

Returns

• A success message
• A object with the created downfreet

Throws

• 403 if the user is not logged in
• 400 If the downfreet was not created by the author

DELETE /api/downfreets/:downfreetId? - Delete an existing downfreet

Returns

• A success message

Throws

• 403 if the user is not logged in
• 403 if the user is not the author of the downfreet
• 404 if the downfreetId is invalid

GET /api/likes?author=USERNAME - Get likes by author

Returns

• An array of likes created by user with username author

Throws

• 400 if author is not given
• 404 if author is not a recognized username of any user

GET /api/likes?freet=freetId - Get likes on freet

Returns

• An array of likes created on freet with freetId freetId

Throws

• 400 if freet is not given
• 404 if freet is not a recognized freet

POST /api/likes - Create a new like

Body

• freetid {string} - The freetid being liked

Returns

• A success message
• A object with the created like

Throws

• 403 if the user is not logged in
• 400 If the like was already created by the author
• 404 if the freetId is invalid

DELETE /api/likes/:likeId? - Delete an existing like

Returns

• A success message

Throws

• 403 if the user is not logged in
• 403 if the user is not the author of the like
• 404 if the likeId is invalid

GET /api/refreets - Get all refreets

Returns

• An array of all refreets

GET /api/refreets?author=USERNAME - Get refreets by author

Returns

• An array of refreets created by user with username author

Throws

• 400 if author is not given
• 404 if author is not a recognized username of any user

GET /api/refreets?freet=freetId - Get refreets on freet

Returns

• An array of refreets created on freet with freetId freet

Throws

• 400 if freet is not given
• 404 if freet is not a recognized freet

POST /api/refreets/:freetid - Create a new refreet

Returns

• A success message
• A object with the created refreet from freetid

Throws

• 403 if the user is not logged in
• 400 If the refreet was not created by the author
• 404 if the freetId is invalid

DELETE /api/refreets/:refreetId? - Delete an existing refreet

Returns

• A success message

Throws

• 403 if the user is not logged in
• 403 if the user is not the author of the refreet
• 404 if the refreetId is invalid

GET /api/freetdrafts - Get freetdrafts by author who is signed in as a user

Returns

• An array of freetdrafts created by user who is signed in

Throws

• 403 if user is not logged in

POST /api/freetdrafts - Create a new freet-draft

Body

• content {string} - The content of the freet-draft

Returns

• A success message
• A object with the created freetdraft

Throws

• 403 if the user is not logged in
• 400 If the freetdraft content is empty or a stream of empty spaces
• 413 If the freetdraft content is more than 140 characters long

DELETE /api/freetdrafts/:freetdraftId? - Delete an existing freetdraft

Returns

• A success message

Throws

• 403 if the user is not logged in
• 403 if the user is not the author of the freetdraft
• 404 if the freetdraftId is invalid

PUT /api/freetdrafts/:freetdraftId? - Update an existing freetdraft

Body

• content {string} - The new content of the freetdraft

Returns

• A success message
• An object with the updated freetdraft

Throws

• 403 if the user is not logged in
• 404 if the freetdraftId is invalid
• 403 if the user is not the author of the freetdraft
• 400 if the new freetdraft content is empty or a stream of empty spaces
• 413 if the new freetdraft content is more than 140 characters long

GET /api/bookmarks

Returns

• An array of bookmarks created by user with username author who is logged in

Throws

• 403 if author is not logged in

GET /api/bookmarknests

Returns

• An array of bookmarknests created by user with username author who is logged in

Throws

• 403 if author is not logged in

POST /api/bookmarknests/:nestname/bookmarks/:freetId - Create a new bookmark on freetId in new nest identified by nestname

Returns

• A success message
• A object with the created bookmark

Throws

• 403 if the user is not logged in
• 404 if the freetId is invalid
• 400 - If the user had already added a bookMark on the Freet
• 404 - If the freetid does not exist.
• 400 - If the user had already a nest with the same nestname.

POST /api/bookmarks - Create a new bookmark on freetId in existing nest

Body

• freetId {string} - The freetId an author is bookmarking
• bookmarknestId{string} - The freetId an author is bookmarking

Returns

• A success message
• A object with the created bookmark

Throws

• 403 if the user is not logged in
• 404 if the freetId is invalid
• 404 if the user has a bookmark on freet identified by freetId already
• 404 if the bookmarknestId is invalid

POST /api/bookmarknests - Create a new bookmark nest

Body

• nestname {string} - The name of the new bookmarknest

Returns

• A success message
• A object with the created bookmark nest

Throws

• 403 if the user is not logged in
• 400 if the nestname is invalid
• 409 If the user had already a nest with the same nestname

DELETE /api/bookmarks/:bookmarkId? - Delete an existing bookmark on a Freet

Returns

• A success message

Throws

• 403 if the user is not logged in
• 403 if the user is not the author of the bookmark
• 404 if the bookmarkId is invalid

DELETE /api/bookmarknests/:bookmarknestId? - Delete an existing bookmarknest

Returns

• A success message

Throws

• 403 if the user is not logged in
• 403 if the user is not the author of the nest
• 404 if the bookmarknestId is invalid