You have a buggy-not-runnable-undocumented backend service. It's dead simple, you just have to read the codes very-very carefully.
run nodemon app.js
, fix the reported errors. Once it runs properly, your work is half done. The rest depends on how well you test it.
hint: use Postman, Insomnia, curl, etc