[ENHANCEMENT] Backend API & MongoDB Database Integration

[shrixtacy]

Backend API & MongoDB Database Integration

Level: 🔴 Hard
Contributor: @shrixtacy — Apertre 3.0

---

📋 Summary

CITY-STYLE has no database and no real backend API. The only server-side code is a minimal Express newsletter handler that stores subscribers in a flat JSON file. This issue proposes setting up a MongoDB database with a full REST API to power authentication, products, cart, orders, and reviews.

Current State

• Express server exists (server/index.js) but only serves /api/newsletter and /api/health
• No database — zero MongoDB, zero Mongoose
• Products are hardcoded JS objects in ProductDetail.jsx and Home.jsx
• Cart, orders, reviews, user profiles — all non-existent on the backend
• No API service layer on the frontend

---

🚀 Proposed Changes

1. MongoDB Setup & Schema Design

Schema	Key Fields
User	name, email, passwordHash, avatar, role (user/admin), addresses[], wishlist[]
Product	name, slug, description, price, originalPrice, images[], category, sizes[], colors[], stock, ratings, reviewCount
Cart	userId, items[{ productId, quantity, size, color }]
Order	userId, items[], shippingAddress, paymentStatus, orderStatus, total, timestamps
Review	userId, productId, rating, title, content, verified, createdAt

---

2. Backend Structure

server/
├── config/
│   └── db.js              # MongoDB connection
├── models/
│   ├── User.js
│   ├── Product.js
│   ├── Cart.js
│   ├── Order.js
│   └── Review.js
├── controllers/
│   ├── authController.js
│   ├── productController.js
│   ├── cartController.js
│   ├── orderController.js
│   └── reviewController.js
├── routes/
│   ├── auth.js
│   ├── products.js
│   ├── cart.js
│   ├── orders.js
│   ├── reviews.js
│   └── newsletter.js      # existing
├── middleware/
│   ├── authMiddleware.js   # JWT verification
│   └── adminMiddleware.js  # Admin role check
├── scripts/
│   └── seed.js             # Seed initial product data
└── index.js                # existing, updated with new routes

---

3. API Endpoints

Auth (/api/auth)

Method	Endpoint	Description
POST	/register	Register with email/password
POST	/login	Login, returns JWT
POST	/google	Google OAuth → create/find user
GET	/me	Get current user (protected)

Products (/api/products)

Method	Endpoint	Description
GET	/	List all (filter, sort, paginate)
GET	/:slug	Single product
POST	/	Create (admin)
PUT	/:id	Update (admin)
DELETE	/:id	Delete (admin)

Cart (/api/cart) — all protected

Method	Endpoint	Description
GET	/	Get user's cart
POST	/	Add item
PUT	/:itemId	Update quantity
DELETE	/:itemId	Remove item

Orders (/api/orders) — all protected

Method	Endpoint	Description
POST	/	Place order
GET	/	User's order history
GET	/:id	Order details

Reviews (/api/reviews)

Method	Endpoint	Description
GET	/product/:productId	Get reviews for a product
POST	/	Submit review (protected)

---

4. Frontend API

[Suvam-paul145]

@Snehadas2005 @BDutta18 assign me this isues

[shrixtacy]

@Suvam-paul145 I guess this was Already addressed by someone while I solve other issues so I think they might just close it as it is....