Python FastAPI & Next.js: Build an E-Commerce App & Payment

Create a public GitHub repository for the FastAPI e-commerce nest backend, clone via SSH, add a README and Python gitignore, then initialize a uv project named shop is.

Open visual studio code for the fastapi commerce nest package and review main.py and pyproject.toml. Identify dependencies like fastapi, uvicorn, orm, alembic, json web token, passlib-2, smtp, and jinja2.

Add and configure dependencies for a FastAPI backend to load .env, validate emails, enable Stripe payments, support multi-part uploads, and integrate AWS S3 with Roboto 3 and Google Auth 2.

Set up Visual Studio Code with the Python extension, pylons, and the black formatter, plus the Learn with Summit theme and material icon theme to customize indentation and folder icons.

Configure a FastAPI and Next.js app by building a config.py with a settings class, loading .env via pedantic settings, and exposing project, front-end URL, back-end URL, and database URL.

Define a user model with SQL model, map to the users table, and run migrations to create it; include id, email, password, name, profile picture, address, role, and created_at.

Define the order model in Python FastAPI. Implement order status enum with pending, processing, ship, delivered, cancelled, decimal total price defaulting to 0, and relations to user, payment, and items.

Define the order item model in order_item.py, with quantity, unit price, isReviewed, and references to orders and products, and set up order items and products feeds and relationships.

Define a Python notification model with id, recipient email, title, message, and a notification type enum (welcome, order update, payment update, promotional, security) defaulting to order update, and created_at timestamp.

Define a reset code model for password resets, with fields email (string), code (unique), created_at, and expires_at, stored in the reset_codes table and set to expire five hours after creation.

Create a user schema as a DTO to receive and return user data, with password excluded. Configure model for camel case and support snake or camel input using elast generator.

Define and update user schemas and DTOs for login, token data, and password updates, forgot password requests and reset password requests, using SQL models with camel or snake case config.

Define a prodot schema with read and detail responses for an e-commerce app, including id, name, description, price, stock, category id, image url, and reviews, with alias generation and updates.

Demonstrate why a base model fits schemas better than an sql model. Implement order and order item schemas with a checkout request and order read, using validators and computed subtotal.

Define a cat schema where a cat has cat items containing products, and implement CatRead, CatItemRead, and an add-to-cat schema with product ID and quantity.

Create a notification schema by adding notification.py, define NotificationRead extending the base model, include id, email, and a notification type of NotificationType, and import it into the app.

Define a payments schema in payments.py with a checkout session request that accepts an order_id on checkout. Return a CheckoutSessionResponse with an auto-redirected checkout URL and a tracking session ID.

This lecture guides migrating models to database tables using Alembic, including initializing migrations, configuring env.py, importing models, and running the initial migration to create tables in Postgres or MySQL.

Register all models in the model folder init.py, then run alembic migrations, fix import and configuration errors, define dbURL, and upgrade head to persist tables.

Develop a custom FastAPI exception system with an API exception class, a default 400 status, and a general 500 handler, including a Stripe error handler and JSON responses.

Implement a JWT security service to generate and decode tokens using HS256, with a 30-day expiry and secret key from .env, and handle expiration and invalid tokens with API exceptions.

Fix the JWT algorithm handling by decoding with a list of algorithms and encoding with a single algorithm, clarifying singular versus plural usage to ensure the method works.

Enable two-factor authentication and generate a Gmail app password, then configure your .env with smtp.gmail.com, port 587, and mail user and password to enable email sending.

Build an email service that loads and renders welcome templates with jinja2, then sends emails via asio-smtp using mailhost, port, user, and password.

Create an auth module with a /auth router and a POST /register endpoint that uses a user service and a DB session to return a 201 created user.

Test the registration API with Postman by creating an auth collection and a register request, sending a JSON body with email, name, password, and optional role.

Implement user login by fetching the user, verifying the password with a hash, and generating a JWT access token containing the user id and role for subsequent requests.

Perform login api testing for a FastAPI and Next.js ecommerce app, validate /login with email and password, handle 400 errors and bearer tokens, plan forgot and reset password.

Implement a password reset flow by validating the reset code, checking expiry within five hours, hashing the new password, cleaning up the code, and exposing a post api endpoint.

test the password reset api with postman by sending the reset code and new password to the reset route, validate invalid codes, and confirm a successful reset and login.

Extract the current logged-in user from the token by decoding the access token, obtaining the user id from sub, querying the database, and returning errors if not found or inactive.

Validate admin and delivery users by extracting the current user from the token with getCurrentUser and enforcing roles via getCurrentAdmin and delivery, raising a forbidden API exception when unauthorized.

Learn to implement a user service with methods to fetch all users by latest, update profiles, and securely change passwords by verifying the old password and hashing the new one.

Implement user API endpoints in FastAPI to manage profiles, fetch all users (admin only), and update or change passwords. Build routes under /users and /me with proper dependencies and responses.

Test and debug the profile picture upload api using Postman, form data, and authorization, handling file uploads to the avatar endpoint and logging steps for reliability.

Register the AWS config with the access key, secret key, and bucket name. Create an S3 client and upload files to S3 with a unique name, returning the URL.

Test s3 upload functionality in the fastapi app by switching to the upload to s3 handler, uploading profile pictures, and verifying public access via bucket policy.