[rewrite] Initial project structure with dashboard frontend and api

2024-12-02 08:45:08 +01:00 · 2024-12-02 08:45:08 +01:00 · 40aa0295b1
commit 40aa0295b1
parent c018d2fb52
70 changed files with 19923 additions and 214 deletions
--- a/.gitignore
+++ b/.gitignore
@ -1,2 +1,4 @@
 .env
-**/__pycache__/
+**/__pycache__/
+
+node_modules/
--- a/README.md
+++ b/README.md
@ -13,216 +13,3 @@ Gunicorn is the simplest way to run this project
 ```sh
 gunicorn -w 4 -b HOST:PORT main:app
 ```
-
-# Routes
-
-## Hello World
-### `GET /`
- **Description:** A simple route that returns a JSON message saying 'Hello, Flask!'.
- **Response:**
-  - JSON with the following structure:
-    ```json
-    {
-      "message": "Hello, Flask!"
-    }
-    ```
- **Status Code:**
-  - 200: Success.
-
-
-## Users
-### `POST /register`
- **Description:** Register a new user.
- **Request Body:**
-  - JSON with the following fields:
-    - `username` (string): User's username.
-    - `displayname` (string): User's display name.
-    - `email` (string): User's email address.
-    - `password` (string): User's password.
- **Response:**
-  - JSON indicating the success of the registration.
- **Status Codes:**
-  - 200: Success.
-  - 400: Bad Request (if any required field is missing).
-
-### `POST /login`
- **Description:** Log in a user.
- **Request Body:**
-  - JSON with the following fields:
-    - `username` (string): User's username.
-    - `password` (string): User's password.
- **Response:**
-  - JSON containing authentication token and user information.
- **Status Codes:**
-  - 200: Success.
-  - 400: Bad Request (if any required field is missing).
-
-### `DELETE /logout`
- **Description:** Log out a user by invalidating the JWT token.
- **Authentication:**
-  - Requires a valid JWT token.
- **Response:**
-  - JSON indicating the success of the logout.
- **Status Codes:**
-  - 200: Success.
-  - 401: Unauthorized (if JWT token is missing or invalid).
-
-### `PUT /update/username`
- **Description:** Update the username of the authenticated user.
- **Authentication:**
-  - Requires a valid JWT token.
- **Request Body:**
-  - JSON with the following field:
-    - `new_username` (string): New username.
- **Response:**
-  - JSON indicating the success of the username update.
- **Status Codes:**
-  - 200: Success.
-  - 400: Bad Request (if new_username is missing).
-  - 401: Unauthorized (if JWT token is missing or invalid).
-
-### `PUT /update/displayname`
- **Description:** Update the display name of the authenticated user.
- **Authentication:**
-  - Requires a valid JWT token.
- **Request Body:**
-  - JSON with the following field:
-    - `new_displayname` (string): New display name.
- **Response:**
-  - JSON indicating the success of the display name update.
- **Status Codes:**
-  - 200: Success.
-  - 400: Bad Request (if new_displayname is missing).
-  - 401: Unauthorized (if JWT token is missing or invalid).
-
-### `PUT /update/email`
- **Description:** Update the email address of the authenticated user.
- **Authentication:**
-  - Requires a valid JWT token.
- **Request Body:**
-  - JSON with the following field:
-    - `new_email` (string): New email address.
- **Response:**
-  - JSON indicating the success of the email update.
- **Status Codes:**
-  - 200: Success.
-  - 400: Bad Request (if new_email is missing).
-  - 401: Unauthorized (if JWT token is missing or invalid).
-
-### `PUT /update/password`
- **Description:** Update the password of the authenticated user.
- **Authentication:**
-  - Requires a valid JWT token.
- **Request Body:**
-  - JSON with the following field:
-    - `new_password` (string): New password.
- **Response:**
-  - JSON indicating the success of the password update.
- **Status Codes:**
-  - 200: Success.
-  - 400: Bad Request (if new_password is missing).
-  - 401: Unauthorized (if JWT token is missing or invalid).
-
-### `DELETE /delete`
- **Description:** Delete the account of the authenticated user.
- **Authentication:**
-  - Requires a valid JWT token.
- **Response:**
-  - JSON indicating the success of the account deletion.
- **Status Codes:**
-  - 200: Success.
-  - 401: Unauthorized (if JWT token is missing or invalid).
-
-## Cart
-### `GET /`
- **Description:** Retrieve the contents of the user's shopping cart.
- **Authentication:**
-  - Requires a valid JWT token.
- **Response:**
-  - JSON containing a list of dictionaries representing the cart contents.
- **Status Codes:**
-  - 200: Success.
-  - 401: Unauthorized (if JWT token is missing or invalid).
-
-### `PUT /add/<int:product_id>`
- **Description:** Add a specified quantity of a product to the user's shopping cart.
- **Authentication:**
-  - Requires a valid JWT token.
- **Parameters:**
-  - `count` (optional, int): Quantity of the product to add. Defaults to 1.
- **Response:**
-  - JSON indicating the success of adding the product to the cart.
- **Status Codes:**
-  - 200: Success.
-  - 400: Bad Request (if count is less than 1).
-  - 401: Unauthorized (if JWT token is missing or invalid).
-
-### `DELETE /remove/<int:product_id>`
- **Description:** Remove a specific product from the user's shopping cart.
- **Authentication:**
-  - Requires a valid JWT token.
- **Response:**
-  - JSON indicating the success of removing the product from the cart.
- **Status Codes:**
-  - 200: Success.
-  - 401: Unauthorized (if JWT token is missing or invalid).
-
-### `PUT /update/<int:product_id>`
- **Description:** Update the quantity of a product in the user's shopping cart.
- **Authentication:**
-  - Requires a valid JWT token.
- **Parameters:**
-  - `count` (int): New quantity of the product.
- **Response:**
-  - JSON indicating the success of updating the product quantity in the cart.
- **Status Codes:**
-  - 200: Success.
-  - 400: Bad Request (if count is missing or not a valid integer).
-  - 401: Unauthorized (if JWT token is missing or invalid).
-
-### `GET /purchase`
- **Description:** Complete a purchase, transferring items from the user's cart to the purchase history.
- **Authentication:**
-  - Requires a valid JWT token.
- **Response:**
-  - JSON indicating the success of the purchase.
- **Status Codes:**
-  - 200: Success.
-  - 401: Unauthorized (if JWT token is missing or invalid).
-
-## Products
-### `GET /get`
- **Description:** Retrieve a paginated list of products.
- **Parameters:**
-  - `page` (optional, int): Page number for pagination. Defaults to 0.
- **Response:**
-  - JSON containing a list of products.
- **Status Codes:**
-  - 200: Success.
-  - 400: Bad Request (if the page is less than 0).
-
-### `GET /<int:id>`
- **Description:** Retrieve information about a specific product.
- **Parameters:**
-  - `id` (int): Product identifier.
-  - `fields` (optional, string): Comma-separated list of fields to retrieve (e.g., 'name,price,image').
- **Response:**
-  - JSON containing information about the specified product.
- **Status Codes:**
-  - 200: Success.
-  - 400: Bad Request (if invalid fields are provided).
-
-### `POST /create`
- **Description:** Create a new product listing.
- **Authentication:**
-  - Requires a valid JWT token.
- **Request Body:**
-  - JSON with the following fields:
-    - `name` (string): Product name.
-    - `price` (float): Product price.
- **Response:**
-  - JSON indicating the success of the product listing creation.
- **Status Codes:**
-  - 200: Success.
-  - 400: Bad Request (if name or price is missing or if price is not a valid float).
-  - 401: Unauthorized (if JWT token is missing or invalid).
--- a/backend/.env.example
+++ b/backend/.env.example
@ -0,0 +1,22 @@
+# TODO Fill me up
+
+HOST=
+PORT=
+
+MYSQL_USER=
+MYSQL_DATABASE=
+MYSQL_HOST=
+MYSQL_PORT=
+MYSQL_PASSWORD=
+
+REDIS_HOST=
+REDIS_PORT=
+
+JWT_SECRET_KEY=
+
+MAIL_SERVER=
+MAIL_PORT=
+MAIL_USERNAME=
+MAIL_PASSWORD=
+MAIL_USE_TLS=
+MAIL_DEFAULT_SENDER=
--- a/backend/app/init.py
+++ b/backend/app/init.py
@ -0,0 +1,29 @@
+from flask import Flask
+from flask_jwt_extended import JWTManager
+from flask_mail import Mail
+from flasgger import Swagger
+
+from app.doc.main_swag import main_swagger
+
+app = Flask(__name__)
+from app.config import FlaskTesting, FlaskProduction
+
+app.config.from_object(FlaskTesting)
+
+flask_mail = Mail(app)
+jwt_manager = JWTManager(app)
+swag = Swagger(app, template=main_swagger)
+
+
+def create_app():
+    from app.api import bp, bp_errors, bp_product, bp_user, bp_cart
+
+    app.register_blueprint(bp)
+    app.register_blueprint(bp_errors)
+    app.register_blueprint(bp_product)
+    app.register_blueprint(bp_user)
+    app.register_blueprint(bp_cart)
+
+    from . import jwt_utils
+
+    return app
--- a/backend/app/api/init.py
+++ b/backend/app/api/init.py
@ -0,0 +1,9 @@
+from flask import Blueprint
+
+bp_errors = Blueprint('errors', __name__)
+bp = Blueprint('api', __name__)
+bp_product = Blueprint('products', __name__, url_prefix="/products")
+bp_user = Blueprint('user', __name__, url_prefix="/user")
+bp_cart = Blueprint('cart', __name__, url_prefix="/cart")
+
+from . import routes
--- a/backend/app/api/routes/init.py
+++ b/backend/app/api/routes/init.py
@ -0,0 +1,15 @@
+from app.api.routes.user import (
+    register_route,
+    login_route,
+    logout_route,
+    update_route,
+    delete_route,
+)
+from app.api.routes.product import (
+    product_create_route,
+    product_delete_route,
+    product_info_route,
+    product_page_route,
+)
+
+from app.api.routes import main_routes, error_routes, cart_routes
--- a/backend/app/api/routes/cart_routes.py
+++ b/backend/app/api/routes/cart_routes.py
@ -0,0 +1,79 @@
+from flask import jsonify, abort, request
+from flask_jwt_extended import jwt_required, get_jwt_identity
+
+from app.doc.cart_swag import (
+    show_cart_swagger,
+    add_to_cart_swagger,
+    remove_from_cart_swagger,
+    update_count_in_cart_swagger,
+    purchase_swagger,
+)
+
+from flasgger import swag_from
+
+from app.api import bp_cart
+
+from app.services.cart_service import CartService
+
+
+@bp_cart.route("", methods=["GET"])
+@jwt_required()
+@swag_from(show_cart_swagger)
+def show_cart():
+    user_id = get_jwt_identity()
+
+    result, status_code = CartService.show_cart(user_id)
+
+    return result, status_code
+
+
+@bp_cart.route("/add/<int:product_id>", methods=["PUT"])
+@jwt_required()
+@swag_from(add_to_cart_swagger)
+def add_to_cart(product_id: int):
+    user_id = get_jwt_identity()
+    count = request.args.get("count", default=1, type=int)
+
+    if count < 1:
+        return abort(400)
+
+    result, status_code = CartService.add_to_cart(user_id, product_id, count)
+
+    return result, status_code
+
+
+@bp_cart.route("/remove/<int:product_id>", methods=["DELETE"])
+@jwt_required()
+@swag_from(remove_from_cart_swagger)
+def remove_from_cart(product_id: int):
+    user_id = get_jwt_identity()
+
+    result, status_code = CartService.delete_from_cart(user_id, product_id)
+
+    return result, status_code
+
+
+@bp_cart.route("/update/<int:product_id>", methods=["PUT"])
+@jwt_required()
+@swag_from(update_count_in_cart_swagger)
+def update_count_in_cart(product_id: int):
+    user_id = get_jwt_identity()
+    count = request.args.get("count", type=int)
+
+    if not count:
+        return abort(400)
+
+    result, status_code = CartService.update_count(user_id, product_id, count)
+
+    return result, status_code
+
+
+@bp_cart.route("/purchase", methods=["GET"])
+@jwt_required()
+@swag_from(purchase_swagger)
+def purchase():
+    user_id = get_jwt_identity()
+
+    result, status_code = CartService.purchase(user_id)
+
+    return result, status_code
--- a/backend/app/api/routes/error_routes.py
+++ b/backend/app/api/routes/error_routes.py
@ -0,0 +1,38 @@
+from app.api import bp_errors
+
+
+@bp_errors.app_errorhandler(400)
+def bad_request(e):
+    return {
+        "msg": "The request was incorrectly formatted, or contained invalid data"
+    }, 400
+
+
+@bp_errors.app_errorhandler(401)
+def unauthorized(e):
+    return {"msg": "Failed to authorize the request"}, 401
+
+
+@bp_errors.app_errorhandler(403)
+def forbidden(e):
+    return {"msg": "You shall not pass"}, 403
+
+
+@bp_errors.app_errorhandler(404)
+def not_found(e):
+    return {"msg": "The requested resource was not found"}, 404
+
+
+@bp_errors.app_errorhandler(405)
+def method_not_allowed(e):
+    return {"msg": "The method used is not allowed in current context"}, 405
+
+
+@bp_errors.app_errorhandler(500)
+def internal_error(e):
+    return {"msg": "An error occurred on he server"}, 500
+
+
+@bp_errors.app_errorhandler(501)
+def unimplemented_error(e):
+    return {"msg": "This function has not been implemented yet. Check back soon!"}, 501
--- a/backend/app/api/routes/main_routes.py
+++ b/backend/app/api/routes/main_routes.py
@ -0,0 +1,12 @@
+from flask import jsonify
+from flasgger import swag_from
+
+from app.doc.root_swag import root_swagger
+
+from app.api import bp
+
+
+@bp.route("/")
+@swag_from(root_swagger)
+def hello():
+    return jsonify({"message": "Hello, Flask!"})
--- a/backend/app/api/routes/product/product_create_route.py
+++ b/backend/app/api/routes/product/product_create_route.py
@ -0,0 +1,33 @@
+from flask import jsonify, abort, request
+from flask_jwt_extended import jwt_required, get_jwt_identity
+
+from app.doc.product_swag import create_product_swagger
+
+from flasgger import swag_from
+
+from app.api import bp_product
+
+from app.services.product import product_create_service
+
+
+@bp_product.route("/create", methods=["POST"])
+@swag_from(create_product_swagger)
+@jwt_required()
+def create_product_listing():
+    user_id = get_jwt_identity()
+    name = request.json.get("name")
+    price = request.json.get("price")
+
+    if name is None or price is None:
+        return abort(400)
+
+    float_price = float(price)
+
+    if not isinstance(float_price, float):
+        return abort(400)
+
+    result, status_code = product_create_service.create_product(
+        user_id, name, float_price
+    )
+
+    return jsonify(result), status_code
--- a/backend/app/api/routes/product/product_delete_route.py
+++ b/backend/app/api/routes/product/product_delete_route.py
@ -0,0 +1,19 @@
+from flask import jsonify, abort, request
+from flask_jwt_extended import jwt_required, get_jwt_identity
+
+from flasgger import swag_from
+
+from app.api import bp_product
+
+from app.services.product import product_delete_service
+
+
+@bp_product.route("/<int:product_id>/delete", methods=["DELETE"])
+@jwt_required()
+def delete_product(product_id: int):
+    user_id = get_jwt_identity()
+
+
+    result, status_code = product_delete_service.delete_product(user_id, product_id)
+
+    return jsonify(result), status_code
--- a/backend/app/api/routes/product/product_info_route.py
+++ b/backend/app/api/routes/product/product_info_route.py
@ -0,0 +1,25 @@
+from flask import jsonify, request
+
+from app.doc.product_swag import get_product_info_swagger
+
+from flasgger import swag_from
+
+from app.api import bp_product
+
+from app.services.product import product_info_service
+
+
+@bp_product.route("/<int:product_id>", methods=["GET"])
+@swag_from(get_product_info_swagger)
+def get_product_info(product_id: int):
+    fields = ["name", "price", "image", "image_name", "seller"]
+
+    fields_param = request.args.get("fields")
+
+    fields_param_list = fields_param.split(",") if fields_param else fields
+
+    common_fields = list(set(fields) & set(fields_param_list))
+
+    result, status_code = product_info_service.product_info(product_id)
+
+    return jsonify(result), status_code
--- a/backend/app/api/routes/product/product_page_route.py
+++ b/backend/app/api/routes/product/product_page_route.py
@ -0,0 +1,22 @@
+from flask import jsonify, abort, request
+
+from app.doc.product_swag import get_products_swagger
+
+from flasgger import swag_from
+
+from app.api import bp_product
+
+from app.services.product import product_list_service
+
+
+@bp_product.route("", methods=["GET"])
+@swag_from(get_products_swagger)
+def get_products():
+    page = request.args.get("page", default=0, type=int)
+
+    if page < 0:
+        return abort(400)
+
+    result, status_code = product_list_service.product_list(page)
+
+    return jsonify(result), status_code
--- a/backend/app/api/routes/user/delete_route.py
+++ b/backend/app/api/routes/user/delete_route.py
@ -0,0 +1,22 @@
+from app.api import bp_user
+from flask_jwt_extended import jwt_required, get_jwt_identity, get_jwt
+from flask import request, abort
+
+from flasgger import swag_from
+
+from app.doc.user_swag import delete_swagger
+from app.services.user import delete_service, logout_service
+
+
+@bp_user.route("/delete", methods=["DELETE"])
+@swag_from(delete_swagger)
+@jwt_required()
+def delete_user():
+    user_id = get_jwt_identity()
+
+    result, status_code = delete_service.delete_user(user_id)
+
+    jwt = get_jwt()
+    logout_service.logout(jwt, user_id, True)
+
+    return result, status_code
--- a/backend/app/api/routes/user/login_route.py
+++ b/backend/app/api/routes/user/login_route.py
@ -0,0 +1,33 @@
+from app.api import bp_user
+from flask import request, jsonify
+
+from flasgger import swag_from
+
+import app.messages.api_responses.user_responses as response
+import app.messages.api_errors as errors
+from app.doc.user_swag import login_swagger
+
+from app.services.user import login_service
+
+@bp_user.route("/login", methods=["POST"])
+@swag_from(login_swagger)
+def login():
+    data = request.get_json()
+
+    if not data:
+        result, status_code = errors.NOT_JSON
+        return jsonify(result), status_code
+
+    required_fields = ["username", "password"]
+    missing_fields = [field for field in required_fields if field not in data]
+
+    if missing_fields:
+        result, status_code = errors.MISSING_FIELDS(missing_fields)
+        return jsonify(result), status_code
+        
+    username = data["username"]
+    password = data["password"]
+
+    result, status_code = login_service.login(username, password)
+
+    return result, status_code
--- a/backend/app/api/routes/user/logout_route.py
+++ b/backend/app/api/routes/user/logout_route.py
@ -0,0 +1,20 @@
+from app.api import bp_user
+
+from flasgger import swag_from
+
+from flask_jwt_extended import get_jwt_identity, jwt_required, get_jwt
+
+from app.doc.user_swag import logout_swagger
+from app.services.user import logout_service
+
+
+@bp_user.route("/logout", methods=["DELETE"])
+@swag_from(logout_swagger)
+@jwt_required()
+def logout():
+    jwt = get_jwt()
+    user_id = get_jwt_identity()
+
+    result, status_code = logout_service.logout(jwt, user_id, True)
+
+    return result, status_code
--- a/backend/app/api/routes/user/register_route.py
+++ b/backend/app/api/routes/user/register_route.py
@ -0,0 +1,39 @@
+from app.api import bp_user
+from flask import request, jsonify
+
+from app.services.user import register_service
+
+from app.doc.user_swag import register_swagger
+import app.messages.api_responses.user_responses as response
+import app.messages.api_errors as errors
+
+
+from flasgger import swag_from
+
+
+@bp_user.route("/register", methods=["POST"])
+@swag_from(register_swagger)
+def register():
+    data = request.get_json()
+
+    if not data:
+        result, status_code = errors.NOT_JSON
+        return jsonify(result), status_code
+
+    required_fields = ["username", "displayname", "email", "password"]
+    missing_fields = [field for field in required_fields if field not in data]
+
+    if missing_fields:
+        result, status_code = errors.MISSING_FIELDS(missing_fields)
+        return jsonify(result), status_code
+
+    username = data["username"]
+    displayname = data["displayname"]
+    email = data["email"]
+    password = data["password"]
+
+    result, status_code = register_service.register(
+        username, displayname, email, password
+    )
+
+    return jsonify(result), status_code
--- a/backend/app/api/routes/user/update_route.py
+++ b/backend/app/api/routes/user/update_route.py
@ -0,0 +1,40 @@
+from app.api import bp_user
+from flask import request, jsonify
+from flask_jwt_extended import jwt_required, get_jwt_identity, get_jwt
+
+from flasgger import swag_from
+
+import app.messages.api_errors as errors
+from app.doc.user_swag import update_swagger
+
+from app.services.user import logout_service, update_user_service
+
+
+@bp_user.route("/update", methods=["PUT"])
+@swag_from(update_swagger)
+@jwt_required()
+def update_user():
+    data = request.get_json()
+
+    possible_fields = ["new_username", "new_displayname", "new_email", "new_password"]
+    selected_fields = [field for field in possible_fields if field in data]
+
+    if not selected_fields:
+        result, status_code = errors.NO_FIELD_PROVIDED(possible_fields)
+        return jsonify(result), status_code
+
+    user_id = get_jwt_identity()
+
+    new_username = data.get("new_username")
+    new_displayname = data.get("new_displayname")
+    new_email = data.get("new_email")
+    new_password = data.get("new_password")
+
+    result, status_code = update_user_service.update_user(user_id, new_username, new_displayname, new_email, new_password)
+
+    if status_code < 300:
+        jwt = get_jwt()
+        logout_service.logout(jwt, user_id, False)
+
+    return result, status_code
+
--- a/backend/app/config.py
+++ b/backend/app/config.py
@ -0,0 +1,42 @@
+import os
+
+
+class MySqlConfig:
+    MYSQL_USER = os.environ.get("MYSQL_USER")
+    MYSQL_DATABASE = os.environ.get("MYSQL_DATABASE")
+    MYSQL_HOST = os.environ.get("MYSQL_HOST")
+    MYSQL_PORT = os.environ.get("MYSQL_PORT")
+    MYSQL_PASSWORD = os.environ.get("MYSQL_PASSWORD")
+
+
+class RedisConfig:
+    REDIS_HOST = os.environ.get("REDIS_HOST")
+    REDIS_PORT = os.environ.get("REDIS_PORT")
+    REDIS_PASSWORD = os.environ.get("REDIS_PASSWORD")
+
+
+class FlaskProduction:
+    DEBUG = False
+    JWT_SECRET_KEY = os.environ.get("JWT_SECRET_KEY")
+    SERVER_NAME = os.environ.get("HOST") + ":" + os.environ.get("PORT")
+
+    MAIL_SERVER = os.environ.get("MAIL_SERVER")
+    MAIL_PORT = os.environ.get("MAIL_PORT")
+    MAIL_USERNAME = os.environ.get("MAIL_USERNAME")
+    MAIL_PASSWORD = os.environ.get("MAIL_PASSWORD")
+    MAIL_USE_TLS = os.environ.get("MAIL_USE_TLS")
+    MAIL_DEFAULT_SENDER = os.environ.get("MAIL_DEFAULT_SENDER")
+
+
+class FlaskTesting:
+    DEBUG = True
+    TESTING = True
+    JWT_SECRET_KEY = os.environ.get("JWT_SECRET_KEY")
+    SERVER_NAME = os.environ.get("HOST") + ":" + os.environ.get("PORT")
+
+    MAIL_SERVER = os.environ.get("MAIL_SERVER")
+    MAIL_PORT = os.environ.get("MAIL_PORT")
+    MAIL_USERNAME = os.environ.get("MAIL_USERNAME")
+    MAIL_PASSWORD = os.environ.get("MAIL_PASSWORD")
+    MAIL_USE_TLS = os.environ.get("MAIL_USE_TLS")
+    MAIL_DEFAULT_SENDER = os.environ.get("MAIL_DEFAULT_SENDER")
--- a/backend/app/db/cart_db.py
+++ b/backend/app/db/cart_db.py
--- a/backend/app/db/product_db.py
+++ b/backend/app/db/product_db.py
@ -0,0 +1,118 @@
+from typing import Optional
+
+from app.extensions import db_connection
+
+from app.models.product_model import Product
+
+
+def fetch_products(page: int = 0) -> Optional[list[Product]]:
+    cursor = db_connection.cursor(dictionary=True)
+
+    offset = 10 * page
+    cursor.execute(
+        "select product.id, user.displayname as seller, product.name, product.price_pc from product inner join user on user.id = product.seller_id order by product.id limit 10 offset %s",
+        (offset,),
+    )
+    results = cursor.fetchall()
+
+    if len(results) < 1:
+        return None
+
+    result_products: list[Product] = []
+
+    for row in results:
+        result_products.append(
+            Product(
+                product_id=row["id"],
+                seller_id=row["seller_id"],
+                name=row["name"],
+                price=row["price"],
+                creation_date=row["creation_date"],
+            )
+        )
+
+    return result_products
+
+def fetch_product_by_id(product_id: int) -> Optional[Product]:
+    """
+    Fetches specific product info
+
+    :param product_id: ID of product to be updated.
+    :type product_id: int
+    """
+
+    cursor = db_connection.cursor(dictionary=True)
+
+    cursor.execute("select * from product where id = %s", (product_id,))
+    result = cursor.fetchone()
+
+    if cursor.rowcount != 1:
+        return None
+
+    result_product = Product(
+            product_id=result["id"],
+            seller_id=result["seller_id"],
+            name=result["name"],
+            price=result["price"],
+            creation_date=result["creation_date"],
+        )
+
+    return result_product
+
+
+def fetch_product_extended_by_id(product_id: int) -> Optional[Product]:
+    """
+    Fetches specific product info including the seller n
+
+    :param product_id: ID of product to be updated.
+    :type product_id: int
+    """
+
+    cursor = db_connection.cursor(dictionary=True)
+
+    cursor.execute("select * from product inner join user on user.id = product.seller_id where product.id = %s", (product_id,))
+    result = cursor.fetchone()
+
+    if cursor.rowcount != 1:
+        return None
+
+    result_product = Product(
+            product_id=result["id"],
+            seller_id=result["seller_id"],
+            seller_name=result["displayname"],
+            name=result["name"],
+            price=result["price"],
+            creation_date=result["creation_date"],
+        )
+
+    return result_product
+
+def insert_product(product: Product):
+    """
+    Creates a new product listing
+
+    :param seller_id: User ID
+    :type seller_id: str
+    :param name: New product's name
+    :type name: str
+    :param price: New product's price
+    :type price: float
+    """
+
+    cursor = db_connection.cursor()
+
+    cursor.execute(
+        "insert into product(seller_id, name, price_pc) values (%s, %s, %s)",
+        (product.seller_id, product.name, round(product.price, 2)),
+    )
+    db_connection.commit()
+
+
+def delete_product(product: Product):
+    cursor = db_connection.cursor()
+
+    cursor.execute(
+        "delete from product where id = %s",
+        (product.product_id,),
+    )
+    db_connection.commit()
--- a/backend/app/db/user_db.py
+++ b/backend/app/db/user_db.py
@ -0,0 +1,79 @@
+from typing import Optional
+
+from app.extensions import db_connection
+
+from app.models.user_model import User
+
+
+def fetch_by_username(username: str) -> Optional[User]:
+    cursor = db_connection.cursor(dictionary=True)
+
+    cursor.execute("select * from user where username = %s", (username,))
+
+    result = cursor.fetchone()
+
+    result_user = (
+        User(
+            user_id=result["id"],
+            username=result["username"],
+            displayname=result["displayname"],
+            email=result["email"],
+            password=result["password"],
+            role_id=result["role_id"],
+            creation_date=result["creation_date"],
+        )
+        if result
+        else None
+    )
+
+    return result_user
+
+
+def fetch_by_id(user_id: int) -> Optional[User]:
+    cursor = db_connection.cursor(dictionary=True)
+
+    cursor.execute("select * from user where id = %s", (user_id,))
+
+    result = cursor.fetchone()
+    result_user = (
+        User(
+            user_id=result["id"],
+            username=result["username"],
+            displayname=result["displayname"],
+            email=result["email"],
+            password=result["password"],
+            role_id=result["role_id"],
+            creation_date=result["creation_date"],
+        )
+        if result
+        else None
+    )
+
+    return result_user
+
+
+def insert_user(new_user: User):
+    cursor = db_connection.cursor(dictionary=True)
+
+    cursor.execute(
+        "insert into user (username, displayname, email, password) values (%s, %s, %s, %s)",
+        (new_user.username, new_user.displayname, new_user.email, new_user.password),
+    )
+    db_connection.commit()
+
+
+def delete_user(user: User):
+    cursor = db_connection.cursor(dictionary=True)
+
+    cursor.execute("delete from user where id = %s", (user.user_id,))
+    db_connection.commit()
+
+
+def update_user(user: User):
+    cursor = db_connection.cursor(dictionary=True)
+
+    cursor.execute(
+        "update user set username=%s, displayname=%s, email=%s, password=%s where id = %s",
+        (user.username, user.displayname, user.email, user.password, user.user_id),
+    )
+    db_connection.commit()
--- a/backend/app/doc/cart_swag.py
+++ b/backend/app/doc/cart_swag.py
@ -0,0 +1,118 @@
+show_cart_swagger = {
+	"tags": ["Cart"],
+	"security": [
+		{"JWT": []}
+	],
+	"responses": {
+		"200": {
+			"description": "Current content of user's shopping cart",
+			"schema": {
+				"items": {
+					"count": {"type": "int"},
+					"date_added": {"type": "string"},
+					"name": {"type": "string"},
+					"price_subtotal": {"type": "string"}
+				},
+				"example": [
+					{
+						"count": 5,
+						"date_added": "Fri, 08 Mar 2024 08:43:09 GMT",
+						"name": "Tablet",
+						"price_subtotal": "1499.95"
+					},
+					{
+						"count": 2,
+						"date_added": "Fri, 08 Mar 2024 06:43:09 GMT",
+						"name": "Laptop",
+						"price_subtotal": "999.95"
+					}
+				]
+			}
+		}
+	}
+}
+
+add_to_cart_swagger ={
+	"tags": ["Cart"],
+	"security": [
+		{"JWT": []}
+	],
+	"parameters": [
+		{
+			"name": "product_id",
+			"description": "ID of product to add to cart.",
+			"in": "path",
+			"type": "int",
+		},
+		{
+			"name": "count",
+			"description": "Count of the products. If not provided, defaults to 1",
+			"in": "query",
+			"type": "int",
+			"default": 1,
+			"minimum": 1,
+			"required": False
+		}
+	],
+	"responses": {
+		"200": {"description": "Successfully added a product to cart"},
+		"400": {"description": "Causes:\n- Count is < 1"}
+	}
+}
+
+remove_from_cart_swagger = {
+	"tags": ["Cart"],
+	"security": [{"JWT": []}],
+	"parameters": [
+		{
+			"name": "product_id",
+			"in": "path",
+			"type": "integer",
+			"description": "ID of the product to be removed from the cart",
+			"required": True
+		}
+	],
+	"responses": {
+		"200": {"description": "Successfully removed item from the cart"},
+		"400": {"description": "Bad Request - Invalid input"},
+		"500": {"description": "Internal Server Error"}
+	}
+}
+
+update_count_in_cart_swagger = {
+	"tags": ["Cart"],
+	"security": [{"JWT": []}],
+	"description": "Updates the count of products in the user's cart. If the count is less than or equal to 0, the product will be removed from the cart.",
+	"parameters": [
+		{
+			"name": "product_id",
+			"in": "path",
+			"type": "integer",
+			"description": "ID of the product to update in the cart",
+			"required": True
+		},
+		{
+			"name": "count",
+			"in": "query",
+			"type": "integer",
+			"description": "New count of the product in the cart",
+			"required": True
+		}
+	],
+	"responses": {
+		"200": {"description": "Successfully updated item count in the cart"},
+		"400": {"description": "Bad Request - Invalid input"},
+		"500": {"description": "Internal Server Error"}
+	}
+}
+
+purchase_swagger = {
+	"tags": ["Cart"],
+	"security": [{"JWT": []}],
+	"description": "Purchases the contents of the user's cart. This action creates a new purchase, moves items from the cart to the purchase history, and clears the cart.",
+	"responses": {
+		"200": {"description": "Successfully completed the purchase"},
+		"400": {"description": "Bad Request - Invalid input or cart is empty"},
+		"500": {"description": "Internal Server Error"}
+	}
+}
--- a/backend/app/doc/main_swag.py
+++ b/backend/app/doc/main_swag.py
@ -0,0 +1,18 @@
+main_swagger = {
+	"info": {
+		"title": "Swag Shop",
+		"version": "0.1",
+		"description": "Simple shop API using flask and co.\nFeatures include:\n- Not working\n- Successful registration of users\n- Adding items to cart\n- I don't know",
+	},
+	"host": "localhost:1236",
+	"schemes": "http",
+	"securityDefinitions": {
+		"JWT": {
+			"type": "apiKey",
+			"scheme": "bearer",
+			"name": "Authorization",
+			"in": "header",
+			"description": "JWT Authorization header using the Bearer scheme.\n*Make sure to prefix the token with **Bearer**!*"
+		}
+	}
+}
--- a/backend/app/doc/product_swag.py
+++ b/backend/app/doc/product_swag.py
@ -0,0 +1,73 @@
+get_products_swagger = {
+	"methods": ["GET"],
+	"tags": ["Products"],
+	"parameters": [
+		
+	],
+	"responses":
+	{
+		"200":
+		{
+			"description": "Get a page of products",
+			"schema":
+			{
+				"type": "object",
+				"properties": {
+					"message": {"type": "string", "example": "Hello, Flask!"}
+				}
+			}
+		}
+	}
+}
+
+get_product_info_swagger = {
+	"tags": ["Products"],
+	"parameters": [
+		{
+			"name": "id",
+			"in": "path",
+			"type": "integer",
+			"description": "ID of the product to fetch information for",
+			"required": True
+		},
+		{
+			"name": "fields",
+			"in": "query",
+			"type": "string",
+			"description": "Comma-separated list of fields to include in the response",
+			"required": False
+		}
+	],
+	"responses": {
+		"200": {"description": "Successfully fetched product information"},
+		"400": {"description": "Bad Request - Invalid input or product doesn't exist"},
+		"500": {"description": "Internal Server Error"}
+	}
+}
+
+create_product_swagger = {
+	"methods": ["POST"],
+	"tags": ["Products"],
+	"security": [{"JWT": []}],
+	"parameters": [
+		{
+			"name": "name",
+			"in": "body",
+			"type": "string",
+			"description": "Name for the new product",
+			"required": True
+		},
+		{
+			"name": "price",
+			"in": "body",
+			"type": "float",
+			"description": "Price of the product",
+			"required": True
+		}
+	],
+	"responses": {
+		"200": {"description": "Successfully fetched product information"},
+		"400": {"description": "Bad Request - Invalid input or missing input"},
+		"500": {"description": "Internal Server Error"}
+	}
+}
--- a/backend/app/doc/root_swag.py
+++ b/backend/app/doc/root_swag.py
@ -0,0 +1,18 @@
+root_swagger = {
+	"methods": ["GET"],
+	"responses":
+	{
+		"200":
+		{
+			"description": "A hello world json",
+			"schema":
+			{
+				"type": "object",
+				"properties":
+				{
+					"message": {"type": "string", "example": "Hello, Flask!"}
+				}
+			}
+		}
+	}
+}
--- a/backend/app/doc/user_swag.py
+++ b/backend/app/doc/user_swag.py
@ -0,0 +1,116 @@
+register_swagger = {
+    "methods": ["POST"],
+    "tags": ["User"],
+    "description": "Registers a new user in the app. Also sends a notification to the user via the provided email",
+    "parameters": [
+        {
+            "in": "body",
+            "name": "body",
+            "description": 'Username, displayname and password of the new user\n- Username can be only lowercase and up to 64 characters\n- Displayname can contain special characters (. _ -) and lower and upper characters\n- Password must be at least 8 characters long, contain both lower and upper characters, numbers and special characters\n- Email has to be in format "name@domain.tld" and up to 64 characters long in total',
+            "required": True,
+            "schema": {
+                "type": "object",
+                "properties": {
+                    "username": {"type": "string", "example": "mycoolusername"},
+                    "email": {"type": "string", "example": "mymail@dot.com"},
+                    "displayname": {"type": "string", "example": "MyCoolDisplayName"},
+                    "password": {"type": "string", "example": "My5tr0ngP@55w0rd"},
+                },
+            },
+        }
+    ],
+}
+
+login_swagger = {
+    "methods": ["POST"],
+    "tags": ["User"],
+    "description": "Logs in using username and password and returns a JWT token for further authorization of requests.\n**The token is valid for 1 hour**",
+    "parameters": [
+        {
+            "in": "body",
+            "name": "body",
+            "description": "Username and password payload",
+            "required": True,
+            "schema": {
+                "type": "object",
+                "properties": {
+                    "username": {"type": "string", "example": "mycoolusername"},
+                    "password": {"type": "string", "example": "MyStrongPassword123"},
+                },
+            },
+        }
+    ],
+    "responses": {
+        "200": {
+            "description": "Returns a fresh token",
+            "schema": {
+                "type": "object",
+                "properties": {
+                    "token": {
+                        "type": "string",
+                        "example": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJmcmVzaCI6ZmFsc2UsImlhdCI6MTcxMDMyMjkyOCwianRpIjoiZDFhYzQxZDktZjA4NC00MmYzLThlMWUtZWFmZjJiNGU1MDAyIiwidHlwZSI6ImFjY2VzcyIsInN1YiI6MjMwMDEsIm5iZiI6MTcxMDMyMjkyOCwiZXhwIjoxNzEwMzI2NTI4fQ.SW7LAi1j5vDOEIvzeN-sy0eHPP9PFJFkXYY029O35w0",
+                    }
+                },
+            },
+        },
+        "400": {
+            "description": "Possible causes:\n- Missing username or password from request.\n- Nonexistent username"
+        },
+        "401": {"description": "Password is incorrect"},
+    },
+}
+
+logout_swagger = {
+    "methods": ["DELETE"],
+    "tags": ["User"],
+    "security": [{"JWT": []}],
+    "description": "Logs out the user via provided JWT token",
+    "parameters": [],
+    "responses": {"200": {"description": "User successfully logged out"}},
+}
+
+update_swagger = {
+    "methods": ["PUT"],
+    "tags": ["User"],
+    "security": [{"JWT": []}],
+    "description": "Updates user attributes.",
+    "parameters": [
+        {
+            "in": "body",
+            "name": "body",
+            "description": "Attributes to update for the user.",
+            "required": True,
+            "schema": {
+                "type": "object",
+                "properties": {
+                    "new_username": {"type": "string", "example": "mycoolusername"},
+                    "new_email": {"type": "string", "example": "mymail@dot.com"},
+                    "new_displayname": {
+                        "type": "string",
+                        "example": "MyCoolDisplayName",
+                    },
+                    "new_password": {"type": "string", "example": "My5tr0ngP@55w0rd"},
+                },
+            },
+        }
+    ],
+    "responses": {
+        "200": {"description": "User attributes updated successfully."},
+        "400": {"description": "Bad request. Check the request body for errors."},
+        "401": {"description": "Unauthorized. User must be logged in."},
+        "409": {"description": "Conflict. Check the response message for details."},
+        "500": {
+            "description": "Internal server error. Contact the system administrator."
+        },
+    },
+}
+
+
+delete_swagger = {
+    "methods": ["DELETE"],
+    "tags": ["User"],
+    "security": [{"JWT": []}],
+    "description": "Deletes a user via JWT token",
+    "parameters": [],
+    "responses": {"200": {"description": "User successfully deleted"}},
+}
--- a/backend/app/extensions.py
+++ b/backend/app/extensions.py
@ -0,0 +1,21 @@
+import mysql.connector
+import redis
+import os
+
+from app.config import RedisConfig
+from app.config import MySqlConfig
+
+db_connection = mysql.connector.connect(
+    host=MySqlConfig.MYSQL_HOST,
+    user=MySqlConfig.MYSQL_USER,
+    password=MySqlConfig.MYSQL_PASSWORD,
+    database=MySqlConfig.MYSQL_DATABASE,
+)
+
+jwt_redis_blocklist = redis.StrictRedis(
+    host=RedisConfig.REDIS_HOST,
+    port=RedisConfig.REDIS_PORT,
+    password=RedisConfig.REDIS_PASSWORD,
+    db=0,
+    decode_responses=True,
+)
--- a/backend/app/jwt_utils.py
+++ b/backend/app/jwt_utils.py
@ -0,0 +1,13 @@
+from app.extensions import jwt_redis_blocklist
+
+from . import jwt_manager
+
+from app import app
+
+
+@jwt_manager.token_in_blocklist_loader
+def check_if_token_is_revoked(jwt_header, jwt_payload: dict) -> bool:
+    jti = jwt_payload["jti"]
+    token_in_redis = jwt_redis_blocklist.get(jti)
+
+    return token_in_redis is not None
--- a/backend/app/mail/mail.py
+++ b/backend/app/mail/mail.py
@ -0,0 +1,17 @@
+from flask_mail import Message
+
+from app import flask_mail
+
+from app.mail.message_content import MessageContent
+
+
+def send_mail(message: MessageContent, recipient: str):
+
+    msg = Message(subject=message.subject, recipients=[recipient], body=message.body)
+
+    try:
+        flask_mail.send(msg)
+        return True
+    except Exception as e:
+        print(f"Failed to send email. Error: {e}")
+        return False
--- a/backend/app/mail/message_content.py
+++ b/backend/app/mail/message_content.py
@ -0,0 +1,4 @@
+class MessageContent:
+    def __init__(self, subject, body):
+        self.subject = subject
+        self.body = body
--- a/backend/app/main.py
+++ b/backend/app/main.py
@ -0,0 +1,7 @@
+from fastapi import FastAPI
+
+app = FastAPI()
+
+@app.get("/")
+async def root():
+    return {"message": "Hello World"}
--- a/backend/app/messages/api_errors.py
+++ b/backend/app/messages/api_errors.py
@ -0,0 +1,15 @@
+NOT_JSON = {"msg": "Request body must be JSON"}, 400
+
+
+def UNKNOWN_DATABASE_ERROR(e):
+    return {"msg": f"An unknown error occurred within the database. {e}"}, 500
+
+
+def MISSING_FIELDS(fields):
+    return {"msg": f"Missing required fields: {', '.join(fields)}"}, 400
+
+
+def NO_FIELD_PROVIDED(possible_fields):
+    return {
+        "msg": f"No field was provided. At least one of the following is required: {', '.join(possible_fields)}"
+    }, 400
--- a/backend/app/messages/api_responses/product_responses.py
+++ b/backend/app/messages/api_responses/product_responses.py
@ -0,0 +1,6 @@
+PRODUCT_LISTING_CREATED_SUCCESSFULLY = {"msg": "Successfully created a brand new product."}, 201
+
+NOT_OWNER_OF_PRODUCT =  {"msg": "You don't own this product, therefore you cannot delete it!"}, 400
+UNKNOWN_PRODUCT = {"msg": "The product you tried fetching is not known. Try a different product ID."}, 400
+
+SCROLLED_TOO_FAR = {"msg": "You scrolled too far in the pages. Try going back a little again."}, 400
--- a/backend/app/messages/api_responses/user_responses.py
+++ b/backend/app/messages/api_responses/user_responses.py
@ -0,0 +1,26 @@
+USER_CREATED_SUCCESSFULLY = {"msg": "User created successfully."}, 201
+USER_LOGGED_OUT_SUCCESSFULLY = {"msg": "Successfully logged out"}, 200
+USER_DELETED_SUCCESSFULLY = {"msg": "User successfully deleted"}, 200
+
+
+def USER_ACCOUNT_UPDATED_SUCCESSFULLY(updated_attributes):
+    return {"msg": f"Successfully updated your accounts {', '.join(updated_attributes)}"}, 200
+
+INVALID_USERNAME_FORMAT = {
+    "msg": "Username is in incorrect format. It must be between 1 and 64 lowercase characters."
+}, 400
+INVALID_DISPLAYNAME_FORMAT = {
+    "msg": "Display name is in incorrect format. It must contain only letters, '.', '-', or '_' and be between 1 and 64 characters."
+}, 400
+INVALID_EMAIL_FORMAT = {"msg": "Email is in incorrect format."}, 400
+INVALID_PASSWORD_FORMAT = {
+    "msg": "Password is in incorrect format. It must be between 8 and 64 characters and contain at least one uppercase letter, one lowercase letter, one digit, and one special character"
+}, 400
+
+EMAIL_ALREADY_IN_USE = {"msg": "Email already in use."}, 409
+USERNAME_ALREADY_IN_USE = {"msg": "Username already in use."}, 409
+
+USERNAME_NOT_FOUND = {"msg": "Username not found"}, 400
+INCORRECT_PASSWORD = {"msg": "Incorrect password"}, 401
+
+UNKNOWN_ERROR = {"msg": "An unknown error occurred with user"}, 500
--- a/backend/app/messages/mail_responses/user_email.py
+++ b/backend/app/messages/mail_responses/user_email.py
@ -0,0 +1,26 @@
+from app.mail.message_content import MessageContent
+
+USER_EMAIL_SUCCESSFULLY_REGISTERED = MessageContent(
+    subject="Successfully registered!",
+    body="Congratulations! Your account has been successfully created.\nThis mail also serves as a test that the email address is correct",
+)
+
+USER_EMAIL_SUCCESSFULLY_LOGGED_IN = MessageContent(
+    subject="New Login detected!",
+    body="A new login token has been created",
+)
+
+USER_EMAIL_SUCCESSFULLY_LOGGED_OUT = MessageContent(
+    subject="Successfully logged out",
+    body="A login has been revoked. No further action is needed.",
+)
+
+USER_EMAIL_SUCCESSFULLY_UPDATED_ACCOUNT = MessageContent(
+    subject="Account updated",
+    body="Your account has been successfully updated. This also means you have been logged out of everywhere",
+)
+
+USER_EMAIL_SUCCESSFULLY_DELETED_ACCOUNT = MessageContent(
+    subject="Account Deleted!",
+    body="Your account has been deleted. No further action needed",
+)
--- a/backend/app/models/cart_model.py
+++ b/backend/app/models/cart_model.py
@ -0,0 +1,63 @@
+from datetime import datetime
+
+class Cart:
+    """
+    Represents a cart in the system.
+
+    :param id: The unique identifier of the cart.
+    :type id: int
+    :param price_total: The total price of the cart.
+    :type price_total: float
+    :param item_count: The count of items in the cart.
+    :type item_count: int
+    """
+
+    def __init__(
+        self,
+        cart_id: int = None,
+        price_total: float = 0.00,
+        item_count: int = 0,
+    ):
+        self.id = cart_id
+        self.price_total = price_total
+        self.item_count = item_count
+
+    def __repr__(self):
+        return f"Cart(id={self.id}, price_total={self.price_total}, item_count={self.item_count})"
+
+class CartItem:
+    """
+    Represents a cart item in the system.
+
+    :param id: The unique identifier of the cart item.
+    :type id: int
+    :param cart_id: The identifier of the cart.
+    :type cart_id: int
+    :param product_id: The identifier of the product.
+    :type product_id: int
+    :param count: The count of the product in the cart.
+    :type count: int
+    :param price_subtotal: The subtotal price of the product in the cart.
+    :type price_subtotal: float
+    :param date_added: The date and time when the item was added to the cart.
+    :type date_added: datetime
+    """
+
+    def __init__(
+        self,
+        cart_item_id: int = None,
+        cart_id: int = None,
+        product_id: int = None,
+        count: int = 0,
+        price_subtotal: float = 0.00,
+        date_added: datetime = None,
+    ):
+        self.id = cart_item_id
+        self.cart_id = cart_id
+        self.product_id = product_id
+        self.count = count
+        self.price_subtotal = price_subtotal
+        self.date_added = date_added or datetime.now()
+
+    def __repr__(self):
+        return f"CartItem(id={self.id}, cart_id={self.cart_id}, product_id={self.product_id}, count={self.count}, price_subtotal={self.price_subtotal}, date_added={self.date_added})"
--- a/backend/app/models/product_model.py
+++ b/backend/app/models/product_model.py
@ -0,0 +1,38 @@
+from datetime import datetime
+from decimal import Decimal
+
+
+class Product:
+    """
+    Represents a product in the system.
+
+    :param id: The unique identifier of the product.
+    :type id: int
+    :param seller_id: The user ID of the seller.
+    :type seller_id: int
+    :param name: The name of the product.
+    :type name: str
+    :param price: The price of the product.
+    :type price: Decimal
+    :param creation_date: The date and time when the product was created.
+    :type creation_date: datetime
+    """
+
+    def __init__(
+        self,
+        product_id: int = None,
+        seller_id: int = None,
+        seller_name: str = None,
+        name: str = None,
+        price: Decimal = None,
+        creation_date: datetime = None,
+    ):
+        self.product_id = product_id
+        self.seller_id = seller_id
+        self.seller_name = seller_name
+        self.name = name
+        self.price = price
+        self.creation_date = creation_date
+
+    def __repr__(self):
+        return f"Product(product_id={self.product_id}, seller_id={self.seller_id}, seller_name={self.seller_name}, name='{self.name}', price={self.price}, creation_date={self.creation_date!r})"
--- a/backend/app/models/user_model.py
+++ b/backend/app/models/user_model.py
@ -0,0 +1,44 @@
+from datetime import datetime
+
+
+class User:
+    """
+    Represents a user in the system.
+
+    :param user_id: The unique identifier of the user.
+    :type user_id: int
+    :param username: The username of the user.
+    :type username: str
+    :param displayname: The display name of the user.
+    :type displayname: str
+    :param email: The email address of the user.
+    :type email: str
+    :param password: The hashed password of the user.
+    :type password: str
+    :param role_id: The role ID of the user. Defaults to 1.
+    :type role_id: int
+    :param creation_date: The date and time when the user was created.
+    :type creation_date: datetime
+    
+    """
+
+    def __init__(
+        self,
+        user_id: str = None,
+        username: str = None,
+        displayname: str = None,
+        email: str = None,
+        password: str = None,
+        role_id: int = 1,
+        creation_date: datetime = None,
+    ):
+        self.user_id = user_id
+        self.username = username
+        self.displayname = displayname
+        self.email = email
+        self.password = password
+        self.role_id = role_id
+        self.creation_date = creation_date
+
+    def __repr__(self):
+        return f"User(id={self.user_id}, username={self.username}, displayname={self.displayname}, email={self.email}, password={self.password}, role_id={self.role_id}, creation_date={self.creation_date})"
--- a/backend/app/services/cart_service.py
+++ b/backend/app/services/cart_service.py
@ -0,0 +1,162 @@
+from mysql.connector import Error
+from typing import Tuple, Union
+
+from app.extensions import db_connection
+
+
+class CartService:
+
+    @staticmethod
+    @staticmethod
+    def update_count(
+        user_id: str, product_id: int, count: int
+    ) -> Tuple[Union[dict, str], int]:
+        """
+        Updates count of products in user's cart
+
+        :param user_id: User ID.
+        :type user_id: str
+        :param product_id: ID of product to be updated.
+        :type product_id: int
+        :param count: New count of products
+        :type count: int
+        :return: Tuple containing a dictionary with a token and an HTTP status code.
+        :rtype: Tuple[Union[dict, str], int]
+        """
+
+        try:
+            if count <= 0:
+                return CartService.delete_from_cart(user_id, product_id)
+
+            with db_connection.cursor(dictionary=True) as cursor:
+                cursor.execute(
+                    "update cart_item set count = %s where cart_id = %s and product_id = %s",
+                    (count, user_id, product_id),
+                )
+                db_connection.commit()
+
+                return {"Success": "Successfully added to cart"}, 200
+
+        except Error as e:
+            return {"Failed": f"Failed to update item count in cart. Reason: {e}"}, 500
+
+    @staticmethod
+    def delete_from_cart(user_id: str, product_id: int) -> Tuple[Union[dict, str], int]:
+        """
+        Completely deletes an item from a user's cart
+
+        :param user_id: User ID.
+        :type user_id: str
+        :param product_id: ID of product to be updated.
+        :type product_id: int
+        :return: Tuple containing a dictionary with a token and an HTTP status code.
+        :rtype: Tuple[Union[dict, str], int]
+        """
+
+        try:
+            with db_connection.cursor() as cursor:
+                cursor.execute(
+                    "delete from cart_item where cart_id = %s and product_id = %s",
+                    (user_id, product_id),
+                )
+                db_connection.commit()
+
+                return {"Success": "Successfully removed item from cart"}, 200
+        except Error as e:
+            return {"Failed": f"Failed to remove item from cart. Reason: {e}"}, 500
+
+    @staticmethod
+    def show_cart(user_id: str) -> Tuple[Union[dict, str], int]:
+        """
+        Gives the user the content of their cart
+
+        :param user_id: User ID.
+        :type user_id: str
+        :return: Tuple containing a dictionary with a token and an HTTP status code.
+        :rtype: Tuple[Union[dict, str], int]
+        """
+
+        try:
+            with db_connection.cursor(dictionary=True) as cursor:
+                cursor.execute(
+                    "select product.name as product_name, count, price_subtotal, date_added from cart_item inner join product on cart_item.product_id = product.id where cart_item.cart_id = %s",
+                    (user_id,),
+                )
+                rows = cursor.fetchall()
+
+                results = []
+
+                for row in rows:
+                    mid_result = {
+                        "name": row["product_name"],
+                        "count": row["count"],
+                        "price_subtotal": row["price_subtotal"],
+                        "date_added": row["date_added"],
+                    }
+
+                    results.append(mid_result)
+
+            return results, 200
+
+        except Error as e:
+            return {"Failed": f"Failed to load cart. Reason: {e}"}, 500
+
+    @staticmethod
+    def purchase(user_id: str) -> Tuple[Union[dict, str], int]:
+        """
+        "Purchases" the contents of user's cart
+
+        :param user_id: User ID.
+        :type user_id: str
+        :return: Tuple containing a dictionary with a token and an HTTP status code.
+        :rtype: Tuple[Union[dict, str], int]
+        """
+
+        try:
+            with db_connection.cursor(dictionary=True) as cursor:
+                # get all cart items
+                cursor.execute(
+                    "select id, product_id, count, price_subtotal from cart_item where cart_id = %s",
+                    (user_id,),
+                )
+                results = cursor.fetchall()
+
+                if len(results) < 1:
+                    return {"Failed": "Failed to purchase. Cart is Empty"}, 400
+
+                # create a purchase
+                cursor.execute("insert into purchase(user_id) values (%s)", (user_id,))
+
+                last_id = cursor.lastrowid
+
+                parsed = []
+                ids = []
+
+                for row in results:
+                    mid_row = (
+                        last_id,
+                        row["product_id"],
+                        row["count"],
+                        row["price_subtotal"],
+                    )
+
+                    row_id = row["id"]
+
+                    parsed.append(mid_row)
+                    ids.append(row_id)
+
+                insert_query = "INSERT INTO purchase_item (purchase_id, product_id, count, price_subtotal) VALUES (%s, %s, %s, %s)"
+                for row in parsed:
+                    cursor.execute(insert_query, row)
+
+                delete_query = "delete from cart_item where id = %s"
+                for one_id in ids:
+                    cursor.execute(delete_query, (one_id,))
+
+                db_connection.commit()
+
+        # clear cart
+        except Error as e:
+            return {"msg": f"Failed to load cart. Reason: {e}"}, 500
+
+        return {"msg": "Successfully purchased"}, 200
--- a/backend/app/services/product/product_create_service.py
+++ b/backend/app/services/product/product_create_service.py
@ -0,0 +1,30 @@
+from mysql.connector import Error as mysqlError
+
+from app.messages.api_responses import product_responses as response
+import app.messages.api_errors as errors
+
+from app.db import product_db
+
+from app.models.product_model import Product
+
+
+def create_product(seller_id: str, name: str, price: float):
+    """
+    Creates a new product listing
+
+    :param seller_id: User ID
+    :type seller_id: str
+    :param name: New product's name
+    :type name: str
+    :param price: New product's price
+    :type price: float
+    """
+
+    product: Product = Product(seller_id=seller_id, name=name, price=price)
+    try:
+        product_db.insert_product(product)
+
+    except mysqlError as e:
+        return errors.UNKNOWN_DATABASE_ERROR(e)
+
+    return response.PRODUCT_LISTING_CREATED_SUCCESSFULLY
--- a/backend/app/services/product/product_delete_service.py
+++ b/backend/app/services/product/product_delete_service.py
@ -0,0 +1,23 @@
+from mysql.connector import Error as mysqlError
+
+from app.messages.api_responses import product_responses as response
+import app.messages.api_errors as errors
+
+from app.db import product_db
+
+from app.models.product_model import Product
+
+
+def delete_product(seller_id: str, product_id: str):
+    product: Product = product_db.fetch_product_by_id(product_id)
+
+    if product.seller_id != seller_id:
+        return response.NOT_OWNER_OF_PRODUCT
+
+    try:
+        product_db.delete_product(product)
+
+    except mysqlError as e:
+        return errors.UNKNOWN_DATABASE_ERROR(e)
+
+    return response.PRODUCT_LISTING_CREATED_SUCCESSFULLY
--- a/backend/app/services/product/product_helper.py
+++ b/backend/app/services/product/product_helper.py
@ -0,0 +1,8 @@
+import imghdr
+
+def is_base64_jpg(decoded_string) -> bool:
+    try:
+        image_type = imghdr.what(None, decoded_string)
+        return image_type == "jpeg"
+    except Exception:
+        return False
--- a/backend/app/services/product/product_info_service.py
+++ b/backend/app/services/product/product_info_service.py
@ -0,0 +1,20 @@
+from mysql.connector import Error as mysqlError
+
+from app.messages.api_responses import product_responses as response
+import app.messages.api_errors as errors
+
+from app.db import product_db
+
+from app.models.product_model import Product
+
+
+def product_info(product_id: int):
+    try:
+        product: Product = product_db.fetch_product_extended_by_id(product_id)
+
+        if product is None:
+            return response.UNKNOWN_PRODUCT
+
+        return product, 200
+    except mysqlError as e:
+        return errors.UNKNOWN_DATABASE_ERROR(e)
--- a/backend/app/services/product/product_list_service.py
+++ b/backend/app/services/product/product_list_service.py
@ -0,0 +1,29 @@
+from mysql.connector import Error as mysqlError
+
+from app.messages.api_responses import product_responses as response
+import app.messages.api_errors as errors
+
+from app.db import product_db
+
+def product_list(page: int):
+    try:
+        result_products = product_db.fetch_products(page)
+
+        if result_products is None:
+            return response.SCROLLED_TOO_FAR
+
+        result_obj = []
+        for product in result_products:
+            mid_result = {
+                "id": product.product_id,
+                "seller": product.seller_id,
+                "name": product.name,
+                "price": product.price,
+            }
+
+            result_obj.append(mid_result)
+
+        return result_obj, 200
+
+    except mysqlError as e:
+        errors.UNKNOWN_DATABASE_ERROR(e)
--- a/backend/app/services/user/delete_service.py
+++ b/backend/app/services/user/delete_service.py
@ -0,0 +1,31 @@
+from typing import Tuple, Union
+from mysql.connector import Error as mysqlError
+
+import app.db.user_db as user_db
+from app.models.user_model import User
+
+import app.messages.api_responses.user_responses as response
+import app.messages.api_errors as errors
+from app.mail.mail import send_mail
+
+
+from app.messages.mail_responses.user_email import USER_EMAIL_SUCCESSFULLY_DELETED_ACCOUNT
+
+def delete_user(user_id: str) -> Tuple[Union[dict, str], int]:
+    """
+    Deletes a user account.
+
+    :param user_id: User ID.
+    :type user_id: str
+    :return: Tuple containing a dictionary and an HTTP status code.
+    :rtype: Tuple[Union[dict, str], int]
+    """
+
+    try:
+        user: User = user_db.fetch_by_id(user_id=user_id)
+        user_db.delete_user(user)
+        send_mail(USER_EMAIL_SUCCESSFULLY_DELETED_ACCOUNT, user.email)
+    except mysqlError as e:
+        return errors.UNKNOWN_DATABASE_ERROR(e)
+
+    return response.USER_DELETED_SUCCESSFULLY
--- a/backend/app/services/user/login_service.py
+++ b/backend/app/services/user/login_service.py
@ -0,0 +1,45 @@
+import datetime
+from typing import Tuple, Union
+
+import bcrypt
+from mysql.connector import Error as mysqlError
+from flask_jwt_extended import create_access_token
+
+import app.messages.api_responses.user_responses as response
+import app.messages.api_errors as errors
+from app.db import user_db
+from app.mail.mail import send_mail
+from app.models.user_model import User
+from app.messages.mail_responses.user_email import USER_EMAIL_SUCCESSFULLY_LOGGED_IN
+
+
+
+def login(username: str, password: str) -> Tuple[Union[dict, str], int]:
+    """
+    Authenticates a user with the provided username and password.
+
+    :param username: User's username.
+    :type username: str
+    :param password: User's password.
+    :type password: str
+    :return: Tuple containing a dictionary with a token and an HTTP status code.
+    :rtype: Tuple[Union[dict, str], int]
+    """
+    try:
+        user: User = user_db.fetch_by_username(username)
+
+        if user is None:
+            return response.USERNAME_NOT_FOUND
+
+        if not bcrypt.checkpw(password.encode("utf-8"), user.password.encode("utf-8")):
+            return response.INCORRECT_PASSWORD
+
+        expire = datetime.timedelta(hours=1)
+        token = create_access_token(identity=user.user_id, expires_delta=expire)
+
+        send_mail(USER_EMAIL_SUCCESSFULLY_LOGGED_IN, user.email)
+
+        return {"token": token}, 200
+
+    except mysqlError as e:
+        return errors.UNKNOWN_DATABASE_ERROR(e)
--- a/backend/app/services/user/logout_service.py
+++ b/backend/app/services/user/logout_service.py
@ -0,0 +1,31 @@
+from typing import Tuple, Union
+
+import app.messages.api_responses.user_responses as response
+from app.db import user_db
+from app.models.user_model import User
+from app.mail.mail import send_mail
+from app.services.user import user_helper as helper
+from app.messages.mail_responses.user_email import USER_EMAIL_SUCCESSFULLY_LOGGED_OUT
+
+
+def logout(jwt_token, user_id, send_notif: bool) -> Tuple[Union[dict, str], int]:
+    """
+    Logs out a user by invalidating the provided JWT.
+
+    :param jti: JWT ID.
+    :type jti: str
+    :param exp: JWT expiration timestamp.
+    :type exp: int
+    :return: Tuple containing a dictionary and an HTTP status code.
+    :rtype: Tuple[Union[dict, str], int]
+    """
+
+    jti = jwt_token["jti"]
+    exp = jwt_token["exp"]
+
+    user: User = user_db.fetch_by_id(user_id)
+
+    helper.invalidate_token(jti, exp)
+    if send_notif:
+        send_mail(USER_EMAIL_SUCCESSFULLY_LOGGED_OUT, user.email)
+    return response.USER_LOGGED_OUT_SUCCESSFULLY
--- a/backend/app/services/user/register_service.py
+++ b/backend/app/services/user/register_service.py
@ -0,0 +1,64 @@
+import bcrypt
+from typing import Tuple, Union
+from mysql.connector import Error as mysqlError
+
+import app.messages.api_responses.user_responses as response
+import app.messages.api_errors as errors
+from app.db import user_db
+from app.mail.mail import send_mail
+from app.models.user_model import User
+from app.services.user import user_helper as helper
+from app.messages.mail_responses.user_email import USER_EMAIL_SUCCESSFULLY_REGISTERED
+
+
+def register(
+    username: str, displayname: str, email: str, password: str
+) -> Tuple[Union[dict, str], int]:
+    """
+    Registers a new user with the provided username, email, and password.
+
+    :param username: User's username.
+    :type username: str
+    :param email: User's email address.
+    :type email: str
+    :param password: User's password.
+    :type password: str
+    :return: Tuple containing a dictionary and an HTTP status code.
+    :rtype: Tuple[Union[dict, str], int]
+    """
+
+    try:
+        if not helper.verify_username(username):
+            return response.INVALID_USERNAME_FORMAT
+
+        if not helper.verify_displayname(displayname):
+            return response.INVALID_DISPLAYNAME_FORMAT
+
+        if not helper.verify_email(email):
+            return response.INVALID_EMAIL_FORMAT
+
+        if not helper.verify_password(password):
+            return response.INVALID_PASSWORD_FORMAT
+
+        hashed_password = bcrypt.hashpw(password.encode("utf-8"), bcrypt.gensalt())
+
+        new_user: User = User(
+            username=username,
+            displayname=displayname,
+            email=email,
+            password=hashed_password,
+        )
+
+        user_db.insert_user(new_user)
+
+    except mysqlError as e:
+        if "email" in e.msg:
+            return response.EMAIL_ALREADY_IN_USE
+        if "username" in e.msg:
+            return response.USERNAME_ALREADY_IN_USE
+
+        return errors.UNKNOWN_DATABASE_ERROR(e)
+
+    send_mail(USER_EMAIL_SUCCESSFULLY_REGISTERED, new_user.email)
+
+    return response.USER_CREATED_SUCCESSFULLY
--- a/backend/app/services/user/update_user_service.py
+++ b/backend/app/services/user/update_user_service.py
@ -0,0 +1,72 @@
+import bcrypt
+from typing import Tuple, Union
+from mysql.connector import Error as mysqlError
+
+from app.db import user_db
+from app.mail.mail import send_mail
+from app.models.user_model import User
+from app.services.user import user_helper as helper
+from app.messages.api_responses import user_responses as response
+import app.messages.api_errors as errors
+from app.messages.mail_responses.user_email import (
+    USER_EMAIL_SUCCESSFULLY_UPDATED_ACCOUNT,
+)
+
+
+def update_user(
+    user_id: str,
+    new_username: str = None,
+    new_displayname: str = None,
+    new_email: str = None,
+    new_password: str = None,
+) -> Tuple[Union[dict, str], int]:
+    user: User = user_db.fetch_by_id(user_id)
+
+    updated_attributes = []
+
+    if user is None:
+        return response.UNKNOWN_ERROR
+
+    if new_username:
+        if not helper.verify_username(new_username):
+            return response.INVALID_USERNAME_FORMAT
+
+        user.username = new_username
+        updated_attributes.append("username")
+
+    if new_displayname:
+        if not helper.verify_displayname(new_displayname):
+            return response.INVALID_DISPLAYNAME_FORMAT
+
+        user.displayname = new_displayname
+        updated_attributes.append("displayname")
+
+    if new_email:
+        if not helper.verify_email(new_email):
+            return response.INVALID_EMAIL_FORMAT
+
+        user.email = new_email
+        updated_attributes.append("email")
+
+    if new_password:
+        if not helper.verify_password(new_password):
+            return response.INVALID_PASSWORD_FORMAT
+
+        hashed_password = bcrypt.hashpw(new_password.encode("utf-8"), bcrypt.gensalt())
+
+        user.password = hashed_password
+        updated_attributes.append("password")
+
+    try:
+        user_db.update_user(user)
+
+    except mysqlError as e:
+        if "username" in e.msg:
+            return response.USERNAME_ALREADY_IN_USE
+        if "email" in e.msg:
+            return response.EMAIL_ALREADY_IN_USE
+
+        return errors.UNKNOWN_DATABASE_ERROR(e)
+
+    send_mail(USER_EMAIL_SUCCESSFULLY_UPDATED_ACCOUNT, user.email)
+    return response.USER_ACCOUNT_UPDATED_SUCCESSFULLY(updated_attributes)
--- a/backend/app/services/user/user_helper.py
+++ b/backend/app/services/user/user_helper.py
@ -0,0 +1,74 @@
+import re
+from datetime import datetime
+
+from app.extensions import jwt_redis_blocklist
+
+
+def invalidate_token(jti: str, exp: int):
+    """
+    Invalidates a JWT by adding its JTI to the Redis blocklist.
+
+    :param jti: JWT ID.
+    :type jti: str
+    :param exp: JWT expiration timestamp.
+    :type exp: int
+    """
+    expiration = datetime.fromtimestamp(exp)
+    now = datetime.now()
+
+    delta = expiration - now
+    jwt_redis_blocklist.set(jti, "", ex=delta)
+
+
+def verify_email(email: str) -> bool:
+    """
+    Verifies a given email string against a regular expression.
+
+    :param email: Email string.
+    :type email: str
+    :return: Boolean indicating whether the email successfully passed the check.
+    :rtype: bool
+    """
+    email_regex = r"^[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}$"
+    return re.match(email_regex, email) and len(email) <= 64
+
+
+def verify_displayname(displayname: str) -> bool:
+    """
+    Verifies a given display name string against a regular expression.
+
+    :param displayname: Display name string.
+    :type displayname: str
+    :return: Boolean indicating whether the display name successfully passed the check.
+    :rtype: bool
+    """
+    displayname_regex = r"^[a-zA-Z.-_]{1,64}$"
+    return re.match(displayname_regex, displayname)
+
+
+def verify_username(username: str) -> bool:
+    """
+    Verifies a given username string against a regular expression.
+
+    :param username: Username string.
+    :type username: str
+    :return: Boolean indicating whether the username successfully passed the check.
+    :rtype: bool
+    """
+    username_regex = r"^[a-z]{1,64}$"
+    return re.match(username_regex, username)
+
+
+def verify_password(password: str) -> bool:
+    """
+    Verifies a given password string against a regular expression.
+
+    :param password: Password string.
+    :type password: str
+    :return: Boolean indicating whether the password successfully passed the check.
+    :rtype: bool
+    """
+    password_regex = (
+        r"^(?=.*?[A-Z])(?=.*?[a-z])(?=.*?[0-9])(?=.*?[#?!@$ %^&*-]).{8,64}$"
+    )
+    return re.match(password_regex, password)
--- a/backend/requirements.txt
+++ b/backend/requirements.txt
@ -0,0 +1,8 @@
+gunicorn==20.1.0
+mysql-connector-python==8.3.0
+python-dotenv==1.0.1
+PyJWT==2.8.0
+redis==4.5.4
+bcrypt==4.1.2
+SQLAlchemy==2.0.36
+fastapi==0.115.5
--- a/frontend/.gitignore
+++ b/frontend/.gitignore
@ -0,0 +1,23 @@
+# See https://help.github.com/articles/ignoring-files/ for more about ignoring files.
+
+# dependencies
+/node_modules
+/.pnp
+.pnp.js
+
+# testing
+/coverage
+
+# production
+/build
+
+# misc
+.DS_Store
+.env.local
+.env.development.local
+.env.test.local
+.env.production.local
+
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
--- a/frontend/README.md
+++ b/frontend/README.md
@ -0,0 +1,70 @@
+# Getting Started with Create React App
+
+This project was bootstrapped with [Create React App](https://github.com/facebook/create-react-app).
+
+## Available Scripts
+
+In the project directory, you can run:
+
+### `npm start`
+
+Runs the app in the development mode.\
+Open [http://localhost:3000](http://localhost:3000) to view it in your browser.
+
+The page will reload when you make changes.\
+You may also see any lint errors in the console.
+
+### `npm test`
+
+Launches the test runner in the interactive watch mode.\
+See the section about [running tests](https://facebook.github.io/create-react-app/docs/running-tests) for more information.
+
+### `npm run build`
+
+Builds the app for production to the `build` folder.\
+It correctly bundles React in production mode and optimizes the build for the best performance.
+
+The build is minified and the filenames include the hashes.\
+Your app is ready to be deployed!
+
+See the section about [deployment](https://facebook.github.io/create-react-app/docs/deployment) for more information.
+
+### `npm run eject`
+
+**Note: this is a one-way operation. Once you `eject`, you can't go back!**
+
+If you aren't satisfied with the build tool and configuration choices, you can `eject` at any time. This command will remove the single build dependency from your project.
+
+Instead, it will copy all the configuration files and the transitive dependencies (webpack, Babel, ESLint, etc) right into your project so you have full control over them. All of the commands except `eject` will still work, but they will point to the copied scripts so you can tweak them. At this point you're on your own.
+
+You don't have to ever use `eject`. The curated feature set is suitable for small and middle deployments, and you shouldn't feel obligated to use this feature. However we understand that this tool wouldn't be useful if you couldn't customize it when you are ready for it.
+
+## Learn More
+
+You can learn more in the [Create React App documentation](https://facebook.github.io/create-react-app/docs/getting-started).
+
+To learn React, check out the [React documentation](https://reactjs.org/).
+
+### Code Splitting
+
+This section has moved here: [https://facebook.github.io/create-react-app/docs/code-splitting](https://facebook.github.io/create-react-app/docs/code-splitting)
+
+### Analyzing the Bundle Size
+
+This section has moved here: [https://facebook.github.io/create-react-app/docs/analyzing-the-bundle-size](https://facebook.github.io/create-react-app/docs/analyzing-the-bundle-size)
+
+### Making a Progressive Web App
+
+This section has moved here: [https://facebook.github.io/create-react-app/docs/making-a-progressive-web-app](https://facebook.github.io/create-react-app/docs/making-a-progressive-web-app)
+
+### Advanced Configuration
+
+This section has moved here: [https://facebook.github.io/create-react-app/docs/advanced-configuration](https://facebook.github.io/create-react-app/docs/advanced-configuration)
+
+### Deployment
+
+This section has moved here: [https://facebook.github.io/create-react-app/docs/deployment](https://facebook.github.io/create-react-app/docs/deployment)
+
+### `npm run build` fails to minify
+
+This section has moved here: [https://facebook.github.io/create-react-app/docs/troubleshooting#npm-run-build-fails-to-minify](https://facebook.github.io/create-react-app/docs/troubleshooting#npm-run-build-fails-to-minify)
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
--- a/frontend/package.json
+++ b/frontend/package.json
@ -0,0 +1,38 @@
+{
+  "name": "frontend",
+  "version": "0.1.0",
+  "private": true,
+  "dependencies": {
+    "@testing-library/jest-dom": "^5.17.0",
+    "@testing-library/react": "^13.4.0",
+    "@testing-library/user-event": "^13.5.0",
+    "react": "^18.3.1",
+    "react-dom": "^18.3.1",
+    "react-scripts": "5.0.1",
+    "web-vitals": "^2.1.4"
+  },
+  "scripts": {
+    "start": "react-scripts start",
+    "build": "react-scripts build",
+    "test": "react-scripts test",
+    "eject": "react-scripts eject"
+  },
+  "eslintConfig": {
+    "extends": [
+      "react-app",
+      "react-app/jest"
+    ]
+  },
+  "browserslist": {
+    "production": [
+      ">0.2%",
+      "not dead",
+      "not op_mini all"
+    ],
+    "development": [
+      "last 1 chrome version",
+      "last 1 firefox version",
+      "last 1 safari version"
+    ]
+  }
+}
--- a/frontend/public/favicon.ico
+++ b/frontend/public/favicon.ico
--- a/frontend/public/index.html
+++ b/frontend/public/index.html
@ -0,0 +1,43 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <link rel="icon" href="%PUBLIC_URL%/favicon.ico" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <meta name="theme-color" content="#000000" />
+    <meta
+      name="description"
+      content="Web site created using create-react-app"
+    />
+    <link rel="apple-touch-icon" href="%PUBLIC_URL%/logo192.png" />
+    <!--
+      manifest.json provides metadata used when your web app is installed on a
+      user's mobile device or desktop. See https://developers.google.com/web/fundamentals/web-app-manifest/
+    -->
+    <link rel="manifest" href="%PUBLIC_URL%/manifest.json" />
+    <!--
+      Notice the use of %PUBLIC_URL% in the tags above.
+      It will be replaced with the URL of the `public` folder during the build.
+      Only files inside the `public` folder can be referenced from the HTML.
+
+      Unlike "/favicon.ico" or "favicon.ico", "%PUBLIC_URL%/favicon.ico" will
+      work correctly both with client-side routing and a non-root public URL.
+      Learn how to configure a non-root public URL by running `npm run build`.
+    -->
+    <title>React App</title>
+  </head>
+  <body>
+    <noscript>You need to enable JavaScript to run this app.</noscript>
+    <div id="root"></div>
+    <!--
+      This HTML file is a template.
+      If you open it directly in the browser, you will see an empty page.
+
+      You can add webfonts, meta tags, or analytics to this file.
+      The build step will place the bundled scripts into the <body> tag.
+
+      To begin the development, run `npm start` or `yarn start`.
+      To create a production bundle, use `npm run build` or `yarn build`.
+    -->
+  </body>
+</html>
--- a/frontend/public/logo192.png
+++ b/frontend/public/logo192.png
--- a/frontend/public/logo512.png
+++ b/frontend/public/logo512.png
--- a/frontend/public/manifest.json
+++ b/frontend/public/manifest.json
@ -0,0 +1,25 @@
+{
+  "short_name": "React App",
+  "name": "Create React App Sample",
+  "icons": [
+    {
+      "src": "favicon.ico",
+      "sizes": "64x64 32x32 24x24 16x16",
+      "type": "image/x-icon"
+    },
+    {
+      "src": "logo192.png",
+      "type": "image/png",
+      "sizes": "192x192"
+    },
+    {
+      "src": "logo512.png",
+      "type": "image/png",
+      "sizes": "512x512"
+    }
+  ],
+  "start_url": ".",
+  "display": "standalone",
+  "theme_color": "#000000",
+  "background_color": "#ffffff"
+}
--- a/frontend/public/robots.txt
+++ b/frontend/public/robots.txt
@ -0,0 +1,3 @@
+# https://www.robotstxt.org/robotstxt.html
+User-agent: *
+Disallow:
--- a/frontend/src/App.css
+++ b/frontend/src/App.css
@ -0,0 +1,38 @@
+.App {
+  text-align: center;
+}
+
+.App-logo {
+  height: 40vmin;
+  pointer-events: none;
+}
+
+@media (prefers-reduced-motion: no-preference) {
+  .App-logo {
+    animation: App-logo-spin infinite 20s linear;
+  }
+}
+
+.App-header {
+  background-color: #282c34;
+  min-height: 100vh;
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  justify-content: center;
+  font-size: calc(10px + 2vmin);
+  color: white;
+}
+
+.App-link {
+  color: #61dafb;
+}
+
+@keyframes App-logo-spin {
+  from {
+    transform: rotate(0deg);
+  }
+  to {
+    transform: rotate(360deg);
+  }
+}
--- a/frontend/src/App.js
+++ b/frontend/src/App.js
@ -0,0 +1,25 @@
+import logo from './logo.svg';
+import './App.css';
+
+function App() {
+  return (
+    <div className="App">
+      <header className="App-header">
+        <img src={logo} className="App-logo" alt="logo" />
+        <p>
+          Edit <code>src/App.js</code> and save to reload.
+        </p>
+        <a
+          className="App-link"
+          href="https://reactjs.org"
+          target="_blank"
+          rel="noopener noreferrer"
+        >
+          Learn React
+        </a>
+      </header>
+    </div>
+  );
+}
+
+export default App;
--- a/frontend/src/App.test.js
+++ b/frontend/src/App.test.js
@ -0,0 +1,8 @@
+import { render, screen } from '@testing-library/react';
+import App from './App';
+
+test('renders learn react link', () => {
+  render(<App />);
+  const linkElement = screen.getByText(/learn react/i);
+  expect(linkElement).toBeInTheDocument();
+});
--- a/frontend/src/index.css
+++ b/frontend/src/index.css
@ -0,0 +1,13 @@
+body {
+  margin: 0;
+  font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Roboto', 'Oxygen',
+    'Ubuntu', 'Cantarell', 'Fira Sans', 'Droid Sans', 'Helvetica Neue',
+    sans-serif;
+  -webkit-font-smoothing: antialiased;
+  -moz-osx-font-smoothing: grayscale;
+}
+
+code {
+  font-family: source-code-pro, Menlo, Monaco, Consolas, 'Courier New',
+    monospace;
+}
--- a/frontend/src/index.js
+++ b/frontend/src/index.js
@ -0,0 +1,17 @@
+import React from 'react';
+import ReactDOM from 'react-dom/client';
+import './index.css';
+import App from './App';
+import reportWebVitals from './reportWebVitals';
+
+const root = ReactDOM.createRoot(document.getElementById('root'));
+root.render(
+  <React.StrictMode>
+    <App />
+  </React.StrictMode>
+);
+
+// If you want to start measuring performance in your app, pass a function
+// to log results (for example: reportWebVitals(console.log))
+// or send to an analytics endpoint. Learn more: https://bit.ly/CRA-vitals
+reportWebVitals();
--- a/frontend/src/logo.svg
+++ b/frontend/src/logo.svg
@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 841.9 595.3"><g fill="#61DAFB"><path d="M666.3 296.5c0-32.5-40.7-63.3-103.1-82.4 14.4-63.6 8-114.2-20.2-130.4-6.5-3.8-14.1-5.6-22.4-5.6v22.3c4.6 0 8.3.9 11.4 2.6 13.6 7.8 19.5 37.5 14.9 75.7-1.1 9.4-2.9 19.3-5.1 29.4-19.6-4.8-41-8.5-63.5-10.9-13.5-18.5-27.5-35.3-41.6-50 32.6-30.3 63.2-46.9 84-46.9V78c-27.5 0-63.5 19.6-99.9 53.6-36.4-33.8-72.4-53.2-99.9-53.2v22.3c20.7 0 51.4 16.5 84 46.6-14 14.7-28 31.4-41.3 49.9-22.6 2.4-44 6.1-63.6 11-2.3-10-4-19.7-5.2-29-4.7-38.2 1.1-67.9 14.6-75.8 3-1.8 6.9-2.6 11.5-2.6V78.5c-8.4 0-16 1.8-22.6 5.6-28.1 16.2-34.4 66.7-19.9 130.1-62.2 19.2-102.7 49.9-102.7 82.3 0 32.5 40.7 63.3 103.1 82.4-14.4 63.6-8 114.2 20.2 130.4 6.5 3.8 14.1 5.6 22.5 5.6 27.5 0 63.5-19.6 99.9-53.6 36.4 33.8 72.4 53.2 99.9 53.2 8.4 0 16-1.8 22.6-5.6 28.1-16.2 34.4-66.7 19.9-130.1 62-19.1 102.5-49.9 102.5-82.3zm-130.2-66.7c-3.7 12.9-8.3 26.2-13.5 39.5-4.1-8-8.4-16-13.1-24-4.6-8-9.5-15.8-14.4-23.4 14.2 2.1 27.9 4.7 41 7.9zm-45.8 106.5c-7.8 13.5-15.8 26.3-24.1 38.2-14.9 1.3-30 2-45.2 2-15.1 0-30.2-.7-45-1.9-8.3-11.9-16.4-24.6-24.2-38-7.6-13.1-14.5-26.4-20.8-39.8 6.2-13.4 13.2-26.8 20.7-39.9 7.8-13.5 15.8-26.3 24.1-38.2 14.9-1.3 30-2 45.2-2 15.1 0 30.2.7 45 1.9 8.3 11.9 16.4 24.6 24.2 38 7.6 13.1 14.5 26.4 20.8 39.8-6.3 13.4-13.2 26.8-20.7 39.9zm32.3-13c5.4 13.4 10 26.8 13.8 39.8-13.1 3.2-26.9 5.9-41.2 8 4.9-7.7 9.8-15.6 14.4-23.7 4.6-8 8.9-16.1 13-24.1zM421.2 430c-9.3-9.6-18.6-20.3-27.8-32 9 .4 18.2.7 27.5.7 9.4 0 18.7-.2 27.8-.7-9 11.7-18.3 22.4-27.5 32zm-74.4-58.9c-14.2-2.1-27.9-4.7-41-7.9 3.7-12.9 8.3-26.2 13.5-39.5 4.1 8 8.4 16 13.1 24 4.7 8 9.5 15.8 14.4 23.4zM420.7 163c9.3 9.6 18.6 20.3 27.8 32-9-.4-18.2-.7-27.5-.7-9.4 0-18.7.2-27.8.7 9-11.7 18.3-22.4 27.5-32zm-74 58.9c-4.9 7.7-9.8 15.6-14.4 23.7-4.6 8-8.9 16-13 24-5.4-13.4-10-26.8-13.8-39.8 13.1-3.1 26.9-5.8 41.2-7.9zm-90.5 125.2c-35.4-15.1-58.3-34.9-58.3-50.6 0-15.7 22.9-35.6 58.3-50.6 8.6-3.7 18-7 27.7-10.1 5.7 19.6 13.2 40 22.5 60.9-9.2 20.8-16.6 41.1-22.2 60.6-9.9-3.1-19.3-6.5-28-10.2zM310 490c-13.6-7.8-19.5-37.5-14.9-75.7 1.1-9.4 2.9-19.3 5.1-29.4 19.6 4.8 41 8.5 63.5 10.9 13.5 18.5 27.5 35.3 41.6 50-32.6 30.3-63.2 46.9-84 46.9-4.5-.1-8.3-1-11.3-2.7zm237.2-76.2c4.7 38.2-1.1 67.9-14.6 75.8-3 1.8-6.9 2.6-11.5 2.6-20.7 0-51.4-16.5-84-46.6 14-14.7 28-31.4 41.3-49.9 22.6-2.4 44-6.1 63.6-11 2.3 10.1 4.1 19.8 5.2 29.1zm38.5-66.7c-8.6 3.7-18 7-27.7 10.1-5.7-19.6-13.2-40-22.5-60.9 9.2-20.8 16.6-41.1 22.2-60.6 9.9 3.1 19.3 6.5 28.1 10.2 35.4 15.1 58.3 34.9 58.3 50.6-.1 15.7-23 35.6-58.4 50.6zM320.8 78.4z"/><circle cx="420.9" cy="296.5" r="45.7"/><path d="M520.5 78.1z"/></g></svg>
--- a/frontend/src/reportWebVitals.js
+++ b/frontend/src/reportWebVitals.js
@ -0,0 +1,13 @@
+const reportWebVitals = onPerfEntry => {
+  if (onPerfEntry && onPerfEntry instanceof Function) {
+    import('web-vitals').then(({ getCLS, getFID, getFCP, getLCP, getTTFB }) => {
+      getCLS(onPerfEntry);
+      getFID(onPerfEntry);
+      getFCP(onPerfEntry);
+      getLCP(onPerfEntry);
+      getTTFB(onPerfEntry);
+    });
+  }
+};
+
+export default reportWebVitals;
--- a/frontend/src/setupTests.js
+++ b/frontend/src/setupTests.js
@ -0,0 +1,5 @@
+// jest-dom adds custom jest matchers for asserting on DOM nodes.
+// allows you to do things like:
+// expect(element).toHaveTextContent(/react/i)
+// learn more: https://github.com/testing-library/jest-dom
+import '@testing-library/jest-dom';
				`@ -0,0 +1 @@`
				<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 841.9 595.3"><g fill="#61DAFB"><path d="M666.3 296.5c0-32.5-40.7-63.3-103.1-82.4 14.4-63.6 8-114.2-20.2-130.4-6.5-3.8-14.1-5.6-22.4-5.6v22.3c4.6 0 8.3.9 11.4 2.6 13.6 7.8 19.5 37.5 14.9 75.7-1.1 9.4-2.9 19.3-5.1 29.4-19.6-4.8-41-8.5-63.5-10.9-13.5-18.5-27.5-35.3-41.6-50 32.6-30.3 63.2-46.9 84-46.9V78c-27.5 0-63.5 19.6-99.9 53.6-36.4-33.8-72.4-53.2-99.9-53.2v22.3c20.7 0 51.4 16.5 84 46.6-14 14.7-28 31.4-41.3 49.9-22.6 2.4-44 6.1-63.6 11-2.3-10-4-19.7-5.2-29-4.7-38.2 1.1-67.9 14.6-75.8 3-1.8 6.9-2.6 11.5-2.6V78.5c-8.4 0-16 1.8-22.6 5.6-28.1 16.2-34.4 66.7-19.9 130.1-62.2 19.2-102.7 49.9-102.7 82.3 0 32.5 40.7 63.3 103.1 82.4-14.4 63.6-8 114.2 20.2 130.4 6.5 3.8 14.1 5.6 22.5 5.6 27.5 0 63.5-19.6 99.9-53.6 36.4 33.8 72.4 53.2 99.9 53.2 8.4 0 16-1.8 22.6-5.6 28.1-16.2 34.4-66.7 19.9-130.1 62-19.1 102.5-49.9 102.5-82.3zm-130.2-66.7c-3.7 12.9-8.3 26.2-13.5 39.5-4.1-8-8.4-16-13.1-24-4.6-8-9.5-15.8-14.4-23.4 14.2 2.1 27.9 4.7 41 7.9zm-45.8 106.5c-7.8 13.5-15.8 26.3-24.1 38.2-14.9 1.3-30 2-45.2 2-15.1 0-30.2-.7-45-1.9-8.3-11.9-16.4-24.6-24.2-38-7.6-13.1-14.5-26.4-20.8-39.8 6.2-13.4 13.2-26.8 20.7-39.9 7.8-13.5 15.8-26.3 24.1-38.2 14.9-1.3 30-2 45.2-2 15.1 0 30.2.7 45 1.9 8.3 11.9 16.4 24.6 24.2 38 7.6 13.1 14.5 26.4 20.8 39.8-6.3 13.4-13.2 26.8-20.7 39.9zm32.3-13c5.4 13.4 10 26.8 13.8 39.8-13.1 3.2-26.9 5.9-41.2 8 4.9-7.7 9.8-15.6 14.4-23.7 4.6-8 8.9-16.1 13-24.1zM421.2 430c-9.3-9.6-18.6-20.3-27.8-32 9 .4 18.2.7 27.5.7 9.4 0 18.7-.2 27.8-.7-9 11.7-18.3 22.4-27.5 32zm-74.4-58.9c-14.2-2.1-27.9-4.7-41-7.9 3.7-12.9 8.3-26.2 13.5-39.5 4.1 8 8.4 16 13.1 24 4.7 8 9.5 15.8 14.4 23.4zM420.7 163c9.3 9.6 18.6 20.3 27.8 32-9-.4-18.2-.7-27.5-.7-9.4 0-18.7.2-27.8.7 9-11.7 18.3-22.4 27.5-32zm-74 58.9c-4.9 7.7-9.8 15.6-14.4 23.7-4.6 8-8.9 16-13 24-5.4-13.4-10-26.8-13.8-39.8 13.1-3.1 26.9-5.8 41.2-7.9zm-90.5 125.2c-35.4-15.1-58.3-34.9-58.3-50.6 0-15.7 22.9-35.6 58.3-50.6 8.6-3.7 18-7 27.7-10.1 5.7 19.6 13.2 40 22.5 60.9-9.2 20.8-16.6 41.1-22.2 60.6-9.9-3.1-19.3-6.5-28-10.2zM310 490c-13.6-7.8-19.5-37.5-14.9-75.7 1.1-9.4 2.9-19.3 5.1-29.4 19.6 4.8 41 8.5 63.5 10.9 13.5 18.5 27.5 35.3 41.6 50-32.6 30.3-63.2 46.9-84 46.9-4.5-.1-8.3-1-11.3-2.7zm237.2-76.2c4.7 38.2-1.1 67.9-14.6 75.8-3 1.8-6.9 2.6-11.5 2.6-20.7 0-51.4-16.5-84-46.6 14-14.7 28-31.4 41.3-49.9 22.6-2.4 44-6.1 63.6-11 2.3 10.1 4.1 19.8 5.2 29.1zm38.5-66.7c-8.6 3.7-18 7-27.7 10.1-5.7-19.6-13.2-40-22.5-60.9 9.2-20.8 16.6-41.1 22.2-60.6 9.9 3.1 19.3 6.5 28.1 10.2 35.4 15.1 58.3 34.9 58.3 50.6-.1 15.7-23 35.6-58.4 50.6zM320.8 78.4z"/><circle cx="420.9" cy="296.5" r="45.7"/><path d="M520.5 78.1z"/></g></svg>