https://github.com/douglasdotv/account-service
API for accounting services with role-based access, security logging and account management, built with Spring Boot and Spring Security.
https://github.com/douglasdotv/account-service
account-service hyperskill java spring-boot spring-data spring-security
Last synced: about 1 month ago
JSON representation
API for accounting services with role-based access, security logging and account management, built with Spring Boot and Spring Security.
- Host: GitHub
- URL: https://github.com/douglasdotv/account-service
- Owner: douglasdotv
- Created: 2024-10-30T03:28:52.000Z (over 1 year ago)
- Default Branch: master
- Last Pushed: 2024-10-30T03:29:00.000Z (over 1 year ago)
- Last Synced: 2025-01-13T21:10:27.589Z (over 1 year ago)
- Topics: account-service, hyperskill, java, spring-boot, spring-data, spring-security
- Language: Java
- Size: 166 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Account Service
[](https://github.com/douglasdotv/account-service/blob/master/README.md)
[](https://github.com/douglasdotv/account-service/blob/master/README.pt-br.md)
## Introduction
This is a project focused on creating a secure accounting service. The service is designed as a REST API, integrating authentication, authorization and business logic related to accounting practices.
## Features
- Accounting functionalities via API
- Role-based access control for administrators, accountants, auditors, and other employees
- Security event tracking and logging for crucial activities
- Account locking mechanism after five unsuccessful login attempts
## Endpoints
- POST /api/auth/signup: register a new user
- POST /api/auth/changepass: change the password of an authenticated user.
- POST /api/acct/payments: add a batch of payments
- PUT /api/acct/payments: update a specific payment
- GET /api/admin/user/: retrieve all app users
- DELETE /api/admin/user/{userEmail}: delete user by e-mail
- PUT /api/admin/user/role: grant/remove roles to users
- PUT /api/admin/user/access: lock/unlock user access
- GET /api/empl/payment: get a payment for an employee for a specific period (or get all payments if no period is specified)
## Permissions
| Endpoint | Anonymous | User | Accountant | Administrator | Auditor |
| :-------------------------: | :-------: | :--: | :--------: | :-----------: | :-----: |
| `POST api/auth/signup` | + | + | + | + | + |
| `POST api/auth/changepass` | | + | + | + | - |
| `GET api/empl/payment` | - | + | + | - | - |
| `POST api/acct/payments` | - | - | + | - | - |
| `PUT api/acct/payments` | - | - | + | - | - |
| `GET api/admin/user` | - | - | - | + | - |
| `DELETE api/admin/user` | - | - | - | + | - |
| `PUT api/admin/user/role` | - | - | - | + | - |
| `PUT api/admin/user/access` | - | - | - | + | - |
| `GET api/security/events` | - | - | - | - | + |
## Tools Used
- Java
- Spring Boot
- Spring Security
- Spring Data JPA
- H2
- Lombok
- MapStruct