Apis.http

@Flowboard_Project_Management_System_Backend_HostAddress = http://localhost:5158

### ===============================
### Public - Auth - Done
### ===============================

### Auth - Register
# @name register
POST {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/auth/register
Content-Type: application/json

{
  "userName": "username",
  "firstName": "First name",
  "middleName": "A",
  "lastName": "Last",
  "ContactNumber": "+639123456789",
  "birthDate": "2000-01-01T00:00:00Z",
  "userIMG": null,
  "email": "exampleemail@gmail.com",
  "password": "yourSecuredPassw0rd01!"
}

### Auth - Login
# @name login
POST {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/auth/login
Content-Type: application/json

{
  "UserNameOrEmail": "username",
  "password": "yourSecuredPassw0rd01!"
}

### ===============================
### Users
### ===============================

### Users - Get by ID (Protected)
GET {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/users/{{login.response.body.user.id}}
Authorization: Bearer {{login.response.body.token}}
Accept: application/json


### Users - Update (Replace) - UPDATE - Works
PATCH  {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/users/{{login.response.body.user.id}}
Content-Type: application/json
Authorization: Bearer {{login.response.body.token}}

{
  "middleName": "Q"
}


### Patch - Update Password (server must hash before save) - Works
PATCH {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/users/{{login.response.body.user.id}}
Content-Type: application/json
Authorization: Bearer {{login.response.body.token}}

{
  "password": "Gumanakaya"
}


### ===============================
### Projects
### ===============================

### Projects - Create (Protected) - Works
# @name createProject
POST {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/projects
Content-Type: application/json
Authorization: Bearer {{login.response.body.token}}

{
  "projectName": "bacla AYOSYIN molang",
  "description": "Project AHAAHAHAH HATDOGGG"
}


### Projects - Get My Projects (Protected) - READ - Works
GET {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/projects/{{login.response.body.user.id}}
Authorization: Bearer {{login.response.body.token}}
Accept: application/json

### Projects - Get by ID (Protected) - Works
# @name getProject
GET {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/projects/6919d3b0a66df6db05f2567b
Authorization: Bearer {{login.response.body.token}}
Accept: application/json

### Projects - Get All Members (Protected) - Works
GET {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/projects/{{createProject.response.body.id}}/members
Authorization: Bearer {{login.response.body.token}}
Accept: application/json

### Projects - Update (Protected) - Works
PATCH {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/projects/6919d3b0a66df6db05f2567b
Content-Type: application/json
Authorization: Bearer {{login.response.body.token}}

{
  "projectName": "Updated Project",
  "description": "Updated description"
}


### Projects - Add Members (Protected) - Works
POST {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/projects/{{createProject.response.body.id}}/member
Content-Type: application/json
Authorization: Bearer {{login.response.body.token}}

{
  "teamMembers": [
    "69199c6dce4510fd09b4a0eb"
  ]
}

### Projects - Add Multiple Members and Permissions (Protected)
POST {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/projects/{{createProject.response.body.id}}/member
Content-Type: application/json
Authorization: Bearer {{login.response.body.token}}

{
  "teamMembers": [
    "691989a863538927dd65315c",
    "690d04b90943671dbf22f65e"
  ],
  "permissions": {
    "691989a863538927dd65315c": "Editor",
    "690d04b90943671dbf22f65e": "Team Member"
  }
}

### Projects - Remove Single Member (Protected) - Work
DELETE {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/projects/{{createProject.response.body.id}}/member
Content-Type: application/json
Authorization: Bearer {{login.response.body.token}}

{
  "teamMembers": "69183014ce4510fd09b4a0e0"
}

### Projects - Delete (Protected)
DELETE {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/projects/6919c7caba3bf16fa679bc92
Authorization: Bearer {{login.response.body.token}}

### Projects - Leave Project (Protected) - Self removal
DELETE {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/projects/{{createProject.response.body.id}}/leave
Content-Type: application/json
Authorization: Bearer {{login.response.body.token}}

### ===============================
### Categories (Per-Project) - Create/Read/Update/Delete
### ===============================

### Categories - Create (Protected) - CREATE - Working
# @name createCategory
POST {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/categories
Content-Type: application/json
Authorization: Bearer {{login.response.body.token}}

{
  "projectId": "{{createProject.response.body.id}}",
  "categoryName": "HATDOG"
}

### Categories - Get All From a Project (Protected) - READ - Working
GET {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/categories?projectId={{createProject.response.body.id}}
Authorization: Bearer {{login.response.body.token}}

### Categories - Get By ID (Protected) - READ - Working
GET {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/categories/{{createCategory.response.body.id}}
Authorization: Bearer {{login.response.body.token}}

### Categories - Update (Protected) - UPDATE - Working
PUT {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/categories/{{createCategory.response.body.id}}
Content-Type: application/json
Authorization: Bearer {{login.response.body.token}}

{
  "categoryName": "Updated Category Name"
}

### Categories - Delete (Protected) - DELETE - Working
DELETE {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/categories/{{createCategory.response.body.id}}
Authorization: Bearer {{login.response.body.token}}

### ===============================
### MainTasks (Containers with Title and Description)
### ===============================

### MainTask - Create (Protected)
# @name createMainTask
POST {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/maintasks
Content-Type: application/json
Authorization: Bearer {{login.response.body.token}}

{
  "title": "Sprint 1000 Tasks",
  "description": "All tasks for the first sprint",
  "subTaskId":"{{createSubTask.response.body.id}}"
}

### MainTask - Get All (Protected)
GET {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/maintasks
Authorization: Bearer {{login.response.body.token}}
Accept: application/json

### MainTask - Get by ID (Protected)
GET {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/maintasks/{{createMainTask.response.body.id}}
Authorization: Bearer {{login.response.body.token}}
Accept: application/json

### MainTask - Get SubTasks for MainTask (Protected)
GET {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/maintasks/{{createMainTask.response.body.id}}/subtasks
Authorization: Bearer {{login.response.body.token}}
Accept: application/json

### MainTask - Delete (Protected)
DELETE {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/maintasks/{{createMainTask.response.body.id}}
Authorization: Bearer {{login.response.body.token}}

### ===============================
### SubTasks - Detailed breakdown of MainTasks (Create/Edit/Update/Delete)
### SubTask is a child entity that provides more detailed explanation for a parent MainTask
### ===============================

### SubTask - Create (Protected) - DetailedTaskCreate Policy
### SubTask belongs to a MainTask via MainTaskId field
# @name createSubTask
POST {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/subtasks
Content-Type: application/json
Authorization: Bearer {{login.response.body.token}}

{
  "title": "design mo yung KENINI pubmat",
  "description": "Create comprehensive database schema",
  "priority": "Critical",
  "mainTaskId": "{{createMainTask.response.body.id}}",
  "projectId": "{{createProject.response.body.id}}",
  "categoryId": "{{createCategory.response.body.id}}",
  "assignedTo": ["{{login.response.body.user.id}}"],
  "createdBy": "{{login.response.body.user.id}}",
  "startDate": "2025-12-08T00:00:00Z",
  "endDate": "2025-12-15T23:59:59Z"
}

### SubTask - Get All SubTasks
GET {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/subtasks
Authorization: Bearer {{login.response.body.token}}
Accept: application/json

### SubTask - Get All SubTasks for a Project
GET {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/subtasks?projectId={{createProject.response.body.id}}
Authorization: Bearer {{login.response.body.token}}
Accept: application/json

### SubTask - Get by ID (Protected)
GET {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/subtasks/{{createSubTask.response.body.id}}
Authorization: Bearer {{login.response.body.token}}
Accept: application/json

### SubTask - Get current user's SubTasks
GET {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/subtasks/me
Authorization: Bearer {{login.response.body.token}}
Accept: application/json

### SubTask - Get SubTasks for specific user
GET {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/subtasks/user/{{login.response.body.user.id}}
Authorization: Bearer {{login.response.body.token}}
Accept: application/json

### SubTask - Edit (PATCH, Protected) - DetailedTaskEdit Policy
PATCH {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/subtasks/{{createSubTask.response.body.id}}
Content-Type: application/json
Authorization: Bearer {{login.response.body.token}}

{
  "priority": "Important"
}

### SubTask - Update (PUT, Protected) - DetailedTaskUpdate Policy
PUT {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/subtasks/{{createSubTask.response.body.id}}
Content-Type: application/json
Authorization: Bearer {{login.response.body.token}}

{
  "title": "Design Database Schema - Updated",
  "description": "Updated database schema",
  "priority": "High",
  "mainTaskId": "{{createMainTask.response.body.id}}",
  "projectId": "{{createProject.response.body.id}}",
  "categoryId": "{{createCategory.response.body.id}}",
  "assignedTo": ["{{login.response.body.user.id}}"],
  "createdBy": "{{login.response.body.user.id}}",
  "startDate": "2025-12-08T00:00:00Z",
  "endDate": "2025-12-20T23:59:59Z"
}

### SubTask - Delete (Protected) - DetailedTaskDelete Policy
DELETE {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/subtasks/{{createSubTask.response.body.id}}
Authorization: Bearer {{login.response.body.token}}

### SubTask - Add Comment (Protected)
POST {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/subtasks/{{createSubTask.response.body.id}}/comments
Content-Type: application/json
Authorization: Bearer {{login.response.body.token}}

{
  "authorId": "{{login.response.body.user.id}}",
  "text": "Good progress on the task"
}




# TODO FOR NEXT


### ===============================
### Notifications - Create/Read/Update/Delete
### ===============================

### Notifications: proposed controller (currently not implemented)

### - Endpoints: POST /api/notifications, GET /api/notifications?isRead=false, GET /api/notifications/{id}, PATCH /api/notifications/{id}, DELETE /api/notifications/{id}
### - Model: `FlowboardModel.Notification` (UserId, Message, IsRead, CreatedAt)

### Notifications - Create (Protected) - CREATE
POST {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/notifications
Content-Type: application/json
Authorization: Bearer {{login.response.body.token}}

{
  "userId": "{{login.response.body.user.id}}",
  "message": "A new task was assigned to you",
  "isRead": false
}

### Notifications - Get All For Current User (Protected) - READ
GET {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/notifications
Authorization: Bearer {{login.response.body.token}}

### Notifications - Get Unread (Protected) - READ
GET {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/notifications?isRead=false
Authorization: Bearer {{login.response.body.token}}

### Notifications - Get By ID (Protected) - READ
GET {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/notifications/{{notificationId}}
Authorization: Bearer {{login.response.body.token}}

### Notifications - Update (Mark Read/Unread) - UPDATE
PATCH {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/notifications/{{notificationId}}
Content-Type: application/json
Authorization: Bearer {{login.response.body.token}}

{
  "isRead": true
}

### Notifications - Delete (Protected) - DELETE
DELETE {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/notifications/{{notificationId}}
Authorization: Bearer {{login.response.body.token}}

### ===============================
### Permissions - Create/Read/Update/Delete
### ===============================

### Permissions: project-level and optional permission collection
### - `Project.Permissions` exists; optionally add a separate `Permissions` controller for permission management per project (POST/GET/PATCH/DELETE).


### Permissions - Create (Assign a role to user in project) - CREATE
POST {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/permissions
Content-Type: application/json
Authorization: Bearer {{login.response.body.token}}

{
  "userId": "690d04b90943671dbf22f65e",
  "projectId": "{{createProject.response.body.id}}",
  "role": "Team Member",
  "privileges": { "Create": false, "Read": true, "Update": true, "Delete": false }
}

### Permissions - Get by Project / User - READ
GET {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/permissions?projectId={{createProject.response.body.id}}
Authorization: Bearer {{login.response.body.token}}

### Permissions - Get by ID (Protected) - READ
GET {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/permissions/{{permissionId}}
Authorization: Bearer {{login.response.body.token}}

### Permissions - Update (Protected) - UPDATE
PATCH {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/permissions/{{permissionId}}
Content-Type: application/json
Authorization: Bearer {{login.response.body.token}}

{
  "role": "Editor",
  "privileges": { "Create": true, "Read": true, "Update": true, "Delete": false }
}

### Permissions - Delete (Protected) - DELETE
DELETE {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/permissions/{{permissionId}}
Authorization: Bearer {{login.response.body.token}}

### ===============================
### Analytics - Dashboard Data
### ===============================

### Analytics - Get Summary (Overall system stats)
GET {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/analytics/summary
Authorization: Bearer {{login.response.body.token}}
Accept: application/json

### Analytics - Get Project Stats (Project-specific statistics)
GET {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/analytics/projects/6936c1cb666fe707a30b2c08/stats
Authorization: Bearer {{login.response.body.token}}
Accept: application/json

### Analytics - Get User Overview (User assignment summary)
GET {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/analytics/users/{{login.response.body.user.id}}/overview
Authorization: Bearer {{login.response.body.token}}
Accept: application/json

### Analytics - Get Tasks Timeline (Task creation trends, last 30 days)
GET {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/analytics/tasks/timeline?days=30
Authorization: Bearer {{login.response.body.token}}
Accept: application/json

### Analytics - Get Top Performers (Top 5 users by task completion)
GET {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/analytics/top-performers?limit=5
Authorization: Bearer {{login.response.body.token}}
Accept: application/json

### Analytics - Get Kanban Stats (Project board statistics)
GET {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/analytics/kanban/{{createProject.response.body.id}}
Authorization: Bearer {{login.response.body.token}}
Accept: application/json

### ===============================
### Role-Based Registration Tests
### ===============================

### Register as User (Default Role)
# @name registerUser
POST {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/auth/register
Content-Type: application/json

{
  "userName": "testuser",
  "firstName": "Test",
  "middleName": "User",
  "lastName": "Account",
  "ContactNumber": "+639000000001",
  "birthDate": "2000-01-01T00:00:00Z",
  "userIMG": null,
  "email": "testuser@example.com",
  "password": "TestPassword123!",
  "role": "User"
}

### Register as Client (Read-Only Role)
# @name registerClient
POST {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/auth/register
Content-Type: application/json

{
  "userName": "testclient",
  "firstName": "Test",
  "middleName": "Client",
  "lastName": "Account",
  "ContactNumber": "+639000000002",
  "birthDate": "2000-01-01T00:00:00Z",
  "userIMG": null,
  "email": "testclient@example.com",
  "password": "TestPassword123!",
  "role": "Client"
}

### Login as Client
# @name loginClient
POST {{Flowboard_Project_Management_System_Backend_HostAddress}}/api/auth/login
Content-Type: application/json

{
  "UserNameOrEmail": "testclient",
  "password": "TestPassword123!"
}