💰 Finance Data Processing & Access Control Backend

📌 Overview

This project is a backend system for a finance dashboard that manages users, financial records, and analytics with role-based access control.

It demonstrates backend development concepts including API design, data modeling, business logic, authentication, and access control.

---

🚀 Features

🔐 Authentication & Authorization

• User registration and login using JWT
• Password hashing for security
• Token-based authentication
• Role-based access control (RBAC)

👤 User & Role Management

• Create, update, delete users (Admin only)
• Assign roles: Viewer, Analyst, Admin
• Manage user status (active/inactive)

💰 Financial Records Management

• Create, read, update, delete transactions
• Fields: amount, type, category, date, notes
• Filtering (type, category, date)
• Search functionality
• Pagination support
• Soft delete (logical deletion)

📊 Dashboard APIs

• Total income
• Total expenses
• Net balance
• Category-wise totals
• Recent transactions
• Monthly trends

⚙️ Validation & Error Handling

• Input validation for users and transactions
• Standardized error responses
• Proper HTTP status codes

📘 API Documentation

• Swagger UI available at:

  http://127.0.0.1:5000/apidocs/
  

---

🛠 Tech Stack

• Backend Framework: Flask
• Database: SQLite
• ORM: SQLAlchemy
• Authentication: JWT (PyJWT)
• Password Hashing: Werkzeug
• Environment Variables: python-dotenv
• API Docs: Flasgger (Swagger UI)

---

📁 Project Structure

finance_backend/
│
├── app.py
├── config.py
├── requirements.txt
├── README.md
│
├── database/
│   └── db.py
│
├── models/
│   ├── user_model.py
│   └── transaction_model.py
│
├── routes/
│   ├── auth_routes.py
│   ├── user_routes.py
│   ├── transaction_routes.py
│   └── dashboard_routes.py
│
├── services/
│   ├── user_service.py
│   ├── transaction_service.py
│   └── dashboard_service.py
│
├── utils/
│   ├── auth_utils.py
│   ├── validators.py
│   ├── error_handler.py
│   └── rate_limiter.py (optional)
│
└── tests/ (optional)

---

⚙️ Setup Instructions

1. Clone the repository

git clone <your-repo-link>
cd finance_backend

---

2. Install dependencies

pip install -r requirements.txt

---

3. Create .env file

SECRET_KEY=your_secret_key
DATABASE_URL=sqlite:///finance.db

---

4. Run the application

python app.py

---

🔐 Authentication Usage

Login to get token:

POST /login

Response:

{
  "token": "your_jwt_token"
}

---

Use token in headers:

Authorization: Bearer <your_token>

---

📡 API Endpoints

🔐 Auth

• POST /register
• POST /login

---

👤 Users (Admin only)

• GET /users/
• POST /users/
• PUT /users/<id>
• DELETE /users/<id>
• PATCH /users/<id>/status

---

💰 Transactions

• POST /transactions/ (Admin)
• GET /transactions/ (All)
• PUT /transactions/<id> (Admin)
• DELETE /transactions/<id> (Admin)

Filters:

/transactions?type=expense&category=food

Pagination:

/transactions?page=1&limit=10

Search:

/transactions?search=food

---

📊 Dashboard

• GET /dashboard/summary
• GET /dashboard/category
• GET /dashboard/recent
• GET /dashboard/trends

---

🔐 Role-Based Access

Role	Permissions
Viewer	View dashboard & transactions
Analyst	View + analytics
Admin	Full control (users + transactions)

---

⚠️ Assumptions

• Authentication is implemented using JWT for simplicity
• SQLite is used for ease of setup
• No frontend is included; APIs are tested via Postman/Swagger
• System is designed for demonstration, not production use

---

✨ Future Improvements

• Refresh tokens
• Advanced role permissions
• Rate limiting
• Unit & integration testing
• Deployment (Docker / Cloud)

---

📌 Conclusion

This project demonstrates a structured backend system with clean architecture, role-based access control, and scalable design.

It focuses on correctness, clarity, and maintainability as required by the assignment.

---

example snapshots if the render link doesnt work to show swagger api documentation are under /screenshots folder

👤 Author

Harshikaa lasya