zerobsv/flask-restapi-store

A restapi for a store written in Flask, has a lot of security issues

A REST API in Flask for a store

Installation:

Running the application natively using virtualenv:

• pip3 install virtualenv
• python3 -m venv venv
• source venv/bin/activate
• pip3 install -r requirements.txt
• python3 app.py

Running the application using docker:

• docker build -t restapi:latest -f Dockerfile .
• docker run -it -p 8000:8000 restapi:latest

API:

Request Type: GET Request: 0.0.0.0:8000/ Expected Response: Welcome message

Request Type: GET Request: 0.0.0.0:8000/store Expected Response: 200, Total bill, with total price and tax calculated Error Response: 503, 500

Request Type: POST Request: 0.0.0.0:8000/store Expected Body: Json list of inputs of purchases made Expected Response: 200, List of True/False for each item inserted into the db. Error Response: 503, 500

References:

https://stackoverflow.com/questions/7824101/return-http-status-code-201-in-flask https://stackoverflow.com/questions/152580/whats-the-canonical-way-to-check-for-type-in-python

Tests:

Input 1:

[{
       "item": "Headache pills",
       "itemCategory": "Medicine",
       "quantity": 5,
       "price": 50
   },
   {
       "item": "Sandwich",
       "itemCategory": "Food",
       "quantity": 2,
       "price": 200
   },
   {
       "item": "Perfume",
       "itemCategory": "Imported",
       "quantity": 1,
       "price": 4000
   },
   {
       "item": "Black Swan",
       "itemCategory": "Book",
       "quantity": 1,
       "price": 300
   }
]

Input 2 :

[{
       "item": "Classical Songs Collection",
       "itemCategory": "Music",
       "quantity": 1,
       "price": 500
   },
   {
       "item": "Pants",
       "itemCategory": "Clothes",
       "quantity": 2,
       "price": 1200
   }
]