📝 Users & Notes API

Users & Notes API is a backend REST API for managing users and notes. It is built with FastAPI and demonstrates authentication, role-based authorization, and relational database modeling.

The project focuses on implementing secure user management, ownership-based access control, and admin-level permissions.

🚀 Key Features

• JWT-based authentication (login/register)
• Password hashing using bcrypt
• Role-based access control (admin / user)
• Users can manage only their own notes
• Admin panel for managing all users and notes
• Notes support is_done status
• Users support is_active status
• PostgreSQL database running in Docker

🧠 Domain Model Overview

The application models a simple but secure user-note system:

User
├── Notes
└── Role (admin / user)

Core relationships

• User → Notes

  • Each user can create multiple notes
  • Notes are owned and accessible only by their creator

• Role-based access

  • Admin users can access and manage all users and notes
  • Regular users are restricted to their own data

🧱 Tech Stack

• Python
• FastAPI
• SQLAlchemy ORM
• Pydantic
• Alembic
• PostgreSQL
• Docker & Docker Compose
• JWT (python-jose)
• bcrypt (passlib)

🔐 Authentication & Authorization

• JWT tokens used for authentication
• Passwords are hashed using bcrypt
• Dependency injection protects endpoints
• Role-based access control (admin / user)
• Ownership checks prevent unauthorized access to notes

📡 API Overview

Auth

• POST /auth/register — Create new user (public)
• POST /auth/login — Obtain JWT token (public)

Users

• GET /users/me — Get current user (authenticated)
• PATCH /users/me — Update current user (authenticated)

Notes

• POST /notes/ — Create note (authenticated)
• GET /notes/ — Get user notes (authenticated)