Merge pull request #15 from tuanle03/clr-75-create-api-registration

[CLR-75] Create API Registration

Author: tuanle03

app/api/web/registrations_api.rb

@@ -0,0 +1,35 @@
+module API
+  class Web::RegistrationsAPI < Grape::API
+    resource :registrations do
+      desc 'Create a new user'
+      params do
+        requires :user, type: Hash do
+          requires :email, type: String, desc: 'Email'
+          requires :password, type: String, desc: 'Password'
+          requires :password_confirmation, type: String, desc: 'Password confirmation'
+        end
+      end
+      post do
+        if params[:user][:password] != params[:user][:password_confirmation]
+          return error!({ error: 'Password confirmation does not match' }, 400)
+        end
+
+        if User.find_by(email: params[:user][:email])
+          return error!({ error: 'Email has already been taken' }, 400)
+        end
+
+        user = User.new(params[:user])
+        if user.save
+          token = user.generate_jwt
+          status 200
+          {
+            success: true,
+            token: token
+          }
+        else
+          error!({ error: user.errors.full_messages }, 400)
+        end
+      end
+    end
+  end
+end

app/api/web/sessions_api.rb

@@ -1,6 +1,6 @@
 module API
   class Web::SessionsAPI < Grape::API
-    namespace :session do
+    namespace :sessions do
       desc 'Sign in and retrieve JWT token'
       params do
         requires :email, type: String, desc: 'User email'

app/api/web_api.rb

@@ -6,6 +6,7 @@ class WebAPI < Grape::API
 
   mount Web::FeedbacksAPI
   mount Web::SessionsAPI
+  mount Web::RegistrationsAPI
 
   add_swagger_documentation(
     format: :json,

spec/api/web/registrations_api_spec.rb

@@ -0,0 +1,67 @@
+# frozen_string_literal: true
+
+require 'rails_helper'
+require 'rack/test'
+
+describe Web do
+  include Rack::Test::Methods
+
+  def app
+    Web::RegistrationsAPI
+  end
+
+  describe 'POST /api/web/registrations' do
+    context 'with valid registration parameters' do
+      it 'creates a new user and returns a JWT token' do
+        post '/web/registrations', {
+          user: {
+            email: 'new_user@example.com',
+            password: 'password123',
+            password_confirmation: 'password123'
+          }
+        }
+
+        expect(last_response.status).to eq(200)
+        json = JSON.parse(last_response.body)
+        expect(json['success']).to eq(true)
+        expect(json['token']).to be_present
+      end
+    end
+
+    context 'when email already exists' do
+      before do
+        User.create(email: 'existing_user@example.com', password: 'password123')
+      end
+
+      it 'returns an error message' do
+        post '/web/registrations', {
+          user: {
+            email: 'existing_user@example.com',
+            password: 'password123',
+            password_confirmation: 'password123'
+          }
+        }
+
+        expect(last_response.status).to eq(400)
+        json = JSON.parse(last_response.body)
+        expect(json['error']).to eq('Email has already been taken')
+      end
+    end
+
+    context 'when password confirmation does not match' do
+      it 'returns an error message' do
+        post '/web/registrations', {
+          user: {
+            email: 'user@example.com',
+            password: 'password123',
+            password_confirmation: 'password456'
+          }
+        }
+
+        expect(last_response.status).to eq(400)
+        json = JSON.parse(last_response.body)
+        expect(json['error']).to eq('Password confirmation does not match')
+      end
+    end
+  end
+end

spec/api/web/sessions_api_spec.rb

@@ -10,12 +10,12 @@ def app
     Web::SessionsAPI
   end
 
-  describe 'POST api/web/session/sign_in' do
+  describe 'POST api/web/sessions/sign_in' do
     let(:user) { create(:user, email: 'test@example.com', password: 'password123') }
 
     context 'with valid credentials' do
       it 'returns a JWT token' do
-        post '/web/session/sign_in', { email: user.email, password: 'password123' }
+        post '/web/sessions/sign_in', { email: user.email, password: 'password123' }
 
         expect(last_response.status).to eq(200)
         json = JSON.parse(last_response.body)
@@ -26,7 +26,7 @@ def app
 
     context 'with invalid credentials' do
       it 'returns an error message' do
-        post '/web/session/sign_in', { email: user.email, password: 'wrong_password' }
+        post '/web/sessions/sign_in', { email: user.email, password: 'wrong_password' }
 
         expect(last_response.status).to eq(401)
         json = JSON.parse(last_response.body)
@@ -36,13 +36,13 @@ def app
     end
   end
 
-  describe 'DELETE /api/web/session/sign_out' do
+  describe 'DELETE /api/web/sessions/sign_out' do
     let(:user) { create(:user) }
     let(:token) { user.generate_jwt }
 
     context 'with a valid token' do
       it 'returns a success response' do
-        delete '/web/session/sign_out', {}, 'HTTP_AUTHORIZATION' => "Bearer #{token}"
+        delete '/web/sessions/sign_out', {}, 'HTTP_AUTHORIZATION' => "Bearer #{token}"
         expect(last_response.status).to eq(200)
         json = JSON.parse(last_response.body)
         expect(json['success']).to eq(true)
@@ -51,7 +51,7 @@ def app
 
     context 'with an invalid token' do
       it 'returns an unauthorized response' do
-        delete '/web/session/sign_out', {}, 'HTTP_AUTHORIZATION' => 'Bearer invalid_token'
+        delete '/web/sessions/sign_out', {}, 'HTTP_AUTHORIZATION' => 'Bearer invalid_token'
         expect(last_response.status).to eq(401)
       end
     end

spec/factories/users.rb spec/factories/users_factory.rbspec/factories/users.rb renamed to spec/factories/users_factory.rb

@@ -1,5 +1,7 @@
 FactoryBot.define do
   factory :user do
+    first_name { Faker::Name.first_name }
+    last_name  { Faker::Name.last_name }
     email { 'test@example.com' }
     password { 'password123' }
   end

spec/models/allowlisted_jwt_spec.rb

@@ -0,0 +1,4 @@
+require 'rails_helper'
+
+RSpec.describe AllowlistedJwt, type: :model do
+end