NestJS, Prisma Sample

Backend

The task here is to finish the provided 'barebone' backend by implementing all endpoints and required functionality, and setting up the database following these requirements. The goal of this 'project' is to end up with a working REST API with CRUD endpoints for a simple user management, paired with authorization and authentication methods.

For the backend we are using two modern frameworks, NestJS and Prisma running on Node 14. To make the database setup as simple as possible, we will use a SQlite DB. One part of this task will thus be, to familiarize yourself with the technology stack.

The repository as provided throws NotImplementedException() for the missing functions, as well as misses the data structures and database.

Types

Data is being transferred between functions using Data Transfer Objects. This need to be implemented in accordance with the data model. Optionally, data validation should be implemented as well to assure that valid data is being sent into the application.

Database

The database should follow this schema:

Command lines:

• npx prisma migrate dev for migration
• npx prisma db seed for seeding

Endpoints

• GET /user should query for users with these optional filtering parameters:
  • limit Limit the number of results returned
  • offset Skip the first n results
  • updatedSince Return only items which were updated since Date.
  • id An Array of id(s) to limit the query to
  • name a LIKE search for names
  • credentials include the related credentials in result
  • email search for matching email
• GET /user/:id should return one specific user with that id
• (public) POST /user should create a new user with credentials
• PATCH /user should update a user if it exists and should update credentials if they exist IF the user has not been deleted previously
• DELETE /user marks the user as deleted and also removes related credentials rows, but does NOT remove the user row itself
• (public) POST /user/authenticate authenticates the user with an email/password combination and returns a boolean
• (public) POST /user/token authenticates the user with an email/password combination and returns a JWT token
• (public) POST /user/validate validates a Bearer token sent via authorization header and returns a boolean

Security

• Endpoints marked (public) should allow access without authorization
• Endpoints not marked (public) should check JWT tokens and map to users
• Health Check endpoints should be public and no JWT should be required
• Non-public endpoints called by Admin users should allow requests to modify all users, while regular users should locked into their own user - they are only allowed to work on their own user id
• Passwords need to be hashed and salted

Testing

• If possible, unit tests should check the functionality of the various endpoints and services
• Alternatively, discuss why certain tests were not implemented, necessary or useful, or suggest a test environment

Extra

• Discuss improvements to the data models or endpoints
• Feel free to suggest other solutions to implement similar projects (but for this skill check, do use the given tech stack as provided here)

How to do the skill check

• Fork this repository
• Make modifications as you see fit
• Add all your notes into this readme
• Send us the link to your fork
• Tell us how long it took you to get the repository to the state you sent us - remember: it's ok to take time if it's done properly.
• Import Hiring Backend Test.postman_collection.json into the latest Postman client and run the collection tests. Depending on how you seed your database, some tests may need to be adjusted for ids. Please take a screenshot of the results like this one:
• 
• Send us this screenshot as well as the export of your postman tests.

Your Notes Below Here

Postman Test Results Screenshots

Postman Test Results Screenshots JSON file

It can be found in this file: postman/peyman_mashhadi_Hiring Backend Test.postman_test_run.json

Test Notes:

• I think, for this simple project just writing end2end tests would be sufficient because we don't have any logic or functionalities inside our functions to get any value by writing unit/integration tests for them.
• I just added two tests in src/user/tests for userService.findMany and userSerivce.create to show if there is some logic in those functions, how can we mock the data coming from Prisma and be able to test them. But for now, those tests are not needed.

Here are the results of unit and e2e tests:

---

---

Time taken:

• I've spent around 3 days finishing this challenge.
• It was my first time working with NestJs and Prisma. I had to read documentations and watch tutorial videos to learn about them first. Because of this, it took me more time.
• I'm really glad that this challenge gave me the chance to learn about these modern technologies and I liked them a lot. Thank you for giving me this opportunity.