Fast API Comments and Corrections

[solomonaboyeji]

• Points regarding this repo: https://github.com/Ojulari123/RAA-projects/blob/main/update-project
• [x] Make use of Environment Variables to read credentials and secret keys. (https://pypi.org/project/python-dotenv/)
• [x] Do not insert vital files like database and .env files, passwords etc in your repository, add them into a .gitignore. (https://docs.github.com/en/get-started/getting-started-with-git/ignoring-files)
• [x] Understand Authentication and Authorization. Paste a token into jwt.decode and observe the decoded text
• [x] Understand differences between refresh token and access token.
• [x] Use well descriptive variable names, such admin_message instead of admin
• [x] All foreignkeys should be on ID
• [x] Do not store tokens inside database. This is a huge security flaw, we can be hacked!!!
• [x] Switch all references of usage of customer_username to customer_id
• [x] Build a simple HTML sign up page, that sends the sign up data to your endpoint! Use this as a string in your / endpoint. https://fastapi.tiangolo.com/advanced/custom-response/
• [x] Advanced HTML Rendering Tutorial: https://fastapitutorial.com/blog/serving-html-fastapi/
• [x] Use ilike instead of equation operation to retriever a user using their username. (https://docs.sqlalchemy.org/en/20/core/sqlelement.html#sqlalchemy.sql.expression.ColumnElement.ilike)
• [x] Return back the access token of then when they want to sign via /token
• [x] Protect your endpoint following this tutorial: https://fastapi.tiangolo.com/tutorial/security/oauth2-jwt/#handle-jwt-tokens

[solomonaboyeji]

• [x] Use a response Schema: https://fastapi.tiangolo.com/tutorial/response-model/
• [x] Modularise your Project, i.e. separate endpoints from functions and database, create them in separate files and import them as you require.
• [x] Separate Upload product endpoint from Upload product image endpoint