API

We will probably be using swagger/openAPI for our API implementation.

API requests

(Work in progress)

Admin

(Admins should be able to perform every request, they will have no restrictions.)

Method	Endpoint	Description
POST	/user	create a new user
PUT	/user/{userid}	update user data
DELETE	/user/{userid}	delete a user
GET	/user/{userid}	get user data

Teacher

Method	Endpoint	Description
POST	/subject	create a new subject
DELETE	/subject/{subject_id}	delete subject with given id
PUT	/subject/{subject_id}	update subject data
GET	/subject/{subject_id}	get all data about a subject
POST	/subject/{subject_id}/project	create a new project for a subject
DELETE	/subject/{subject_id}/project/{project_id}	delete a project from a subject
GET	/subject/{subject_id}/project/{project_id}	get all data about a project

Student

Method	Endpoint	Description
GET	/user	get all user data (can only access own data)
PUT	/user	update user data (can only update own data)
DELETE	/user	remove the user (can only remove themself)