A modern, full-featured e-book store API built with NestJS - From browsing to payment, powered by AI
API-EBook is a comprehensive backend system for an electronic bookstore, engineered with NestJS 11.x and TypeScript. This project is not just a simple API—it is a production-ready backend architecture featuring robust authentication, role-based access control (RBAC), complex inventory management, integrated payment processing, document generation, and a cutting-edge AI Agent integration.
To truly master a framework, one must build a functional, real-world application. API-EBook was created with these core objectives:
- 🎯 Best Practices: Implementing modular architecture, dependency injection, custom decorators, guards, and interceptors.
- 🔐 Security-First: Building a complete Auth/Authz system with JWT (Access/Refresh tokens) and role-based permissions.
- 💳 Financial Integration: Integrating Stripe for real-world payment processing.
- 🤖 AI Innovation: Leveraging CopilotKit and LangGraph to create an intelligent AI assistant.
- 📊 Scalable Design: Architecting a complex database schema using Prisma ORM and PostgreSQL.
- Core Framework: NestJS 11.x, TypeScript.
- Database & ORM: PostgreSQL, Prisma ORM 7.x, Redis (Caching & Rate Limiting).
- Security: Passport JWT, Argon2 (Password Hashing), Custom RBAC Guards.
- Payment & Cloud: Stripe (Payment Intent API), Cloudinary (Image Hosting).
- AI Integration: LangGraph (Workflows), CopilotKit Runtime, OpenAI (LLM).
- Document Generation: Docx (Word), PDFKit (PDF), Markdown-it (Parsing).
- Testing: Jest (Unit/Integration), Pactum (E2E API Testing).
- 👤 User Management: Signup/Signin with JWT strategy, automated token refresh, and profile management for Normal/Premium users.
- 📖 Content System: Full CRUD for books and categories, featuring Markdown support for chapters and Cloudinary integration for covers.
- 🛒 Intelligent Cart: Stock-aware shopping cart with the ability to merge guest carts to user accounts upon login.
- 📦 Order Lifecycle: Complete order tracking (Pending → Processing → Shipped → Delivered) with automatic stock deduction and restoration on cancellation.
- 💳 Secure Checkout: End-to-end payment flow via Stripe with transaction history tracking.
- 📄 Document Export: High-quality export of book content to
.docxand.pdfformats with professional formatting. - 🤖 AI Agent Assistant: An integrated assistant for book lookups, web-based content extraction (Tavily), and shop analytics.
- 🛡️ Security & Performance: Custom Throttler for rate limiting, class-validator for input validation, and API Key protection for internal endpoints.
👉 Read the full story here: THE_PROCESS.md
Ensure you have the following installed:
- Node.js (Version >= 18.x)
- npm or yarn
- PostgreSQL (Version >= 14.x)
- Redis (Optional, required for caching/throttling features)
- Docker & Docker Compose (Recommended for easy database setup)
- Clone repository
git clone https://github.com/Hieuej147/ebook-api-.git
cd API-EBook- Install dependencies
npm install- Setup environment variables
Create a .env file in the root:
# Database
DATABASE_URL="postgresql://username:password@localhost:5432/ebook_db?schema=public"
# JWT Secrets
JWT_SECRET="your-super-secret-jwt-key"
JWT_REFRESH_SECRET="your-super-secret-refresh-key"
# Stripe
STRIPE_SECRET_KEY="sk_test_your_stripe_secret_key"
# Cloudinary
CLOUDINARY_NAME="your-cloudinary-cloud-name"
CLOUDINARY_API_KEY="your-cloudinary-api-key"
CLOUDINARY_API_SECRET="your-cloudinary-api-secret"
# CORS
ALLOWED_ORIGINS="http://localhost:3000,http://localhost:5173"
# Port
PORT=3000
# AI Agent (optional)
NESTJS_AGENT_URL="http://localhost:8123"
OPENAI_API_KEY="your-openai-apt-key"
TAVILY_API_KEY="your-tavyly-api-key"
# Redis (optional)
REDIS_HOST="localhost"
REDIS_PORT=6379- Setup database with Docker (recommended)
# Start PostgreSQL container
npm run db:test:up
# Or use docker-compose
docker-compose up -d- Run Prisma migrations
npx prisma migrate dev- Seed database (optional)
npx prisma db seed- Start development server
npm run start:devServer running at: http://localhost:3000
API Documentation: http://localhost:3000/api/docs
# Development
npm run start # Start app
npm run start:dev # Start with watch mode
npm run start:debug # Start with debug mode
# Build
npm run build # Build for production
npm run start:prod # Start production build
# Database
npm run db:test:up # Start PostgreSQL container
npm run db:test:rm # Remove PostgreSQL container
npm run db:test:restart # Restart database with fresh migrations
npm run db:test:studio # Open Prisma Studio
# Testing
npm run test # Run unit tests
npm run test:watch # Run tests in watch mode
npm run test:cov # Run tests with coverage
npm run test:e2e # Run E2E tests
# Code Quality
npm run lint # Lint and fix
npm run format # Format code with PrettierAPI-EBook/
├── src/
│ ├── main.ts # Application entry point
│ ├── app.module.ts # Root module
│ ├── common/ # Shared utilities
│ │ ├── decorators/ # Custom decorators
│ │ ├── guards/ # Auth guards
│ │ └── interfaces/ # TypeScript interfaces
│ └── module/ # Feature modules
│ ├── auth/ # Authentication
│ ├── user/ # User management
│ ├── books/ # Books CRUD
│ ├── category/ # Categories
│ ├── chapters/ # Book chapters
│ ├── cart/ # Shopping cart
│ ├── orders/ # Order management
│ ├── payments/ # Stripe integration
│ ├── export-doc/ # Document export
│ ├── stats/ # Statistics
│ ├── copilotkit/ # AI agent
│ ├── internal-api/ # Internal APIs
│ ├── cloudinary/ # Image upload
│ └── prisma/ # Prisma service
├── prisma/
│ ├── schema.prisma # Database schema
│ └── migrations/ # Migration history
├── test/ # E2E tests
├── ai-agent-python/ # Python AI agent
└── docker-compose.yml # Docker configuration
POST /auth/signup- User registrationPOST /auth/signin- User loginPOST /auth/refresh- Refresh access tokenPOST /auth/logout- User logout
GET /users/me- Get current user profilePATCH /users/me- Update profile informationPATCH /users/me/password- Change account passwordDELETE /users/me- Delete account
GET /books- List all books (Public)GET /books/:id- Get book detailsPOST /books- Create a new book (Admin Only)PATCH /books/:id- Update book details (Admin Only)DELETE /books/:id- Remove a book (Admin Only)
GET /cart- View current shopping cartPOST /cart/items- Add item to cartPATCH /cart/items/:id- Update item quantityDELETE /cart/items/:id- Remove item from cart
POST /orders- Create a new order from cartGET /orders- View personal order historyGET /orders/:id- Get specific order detailsPATCH /orders/:id- Update order informationDELETE /orders/:id- Cancel an order
POST /payments/create-intent- Initialize Stripe Payment IntentPOST /payments/confirm- Confirm successful payment status
Explore the full API documentation via Swagger at: http://localhost:3000/api/docs
1. User → POST /auth/signup → Server
└─> Returns: { user, accessToken, refreshToken }
2. User → POST /auth/signin → Server
└─> Returns: { user, accessToken, refreshToken }
3. User → Request with Authorization: Bearer <accessToken>
└─> Grants access to protected routes
4. When accessToken expires:
User → POST /auth/refresh with refreshToken
└─> Returns: { new accessToken, new refreshToken }
5. User → POST /auth/logout
└─> Server invalidates current refreshToken
Contributions, issues, and feature requests are welcome!
- Fork the project
- Create your feature branch (
git checkout -b feature/AmazingFeature) - Commit your changes (
git commit -m 'Add some AmazingFeature') - Push to the branch (
git push origin feature/AmazingFeature) - Open a Pull Request
This project is UNLICENSED - it's for educational and portfolio purposes.
Hieu Dev
- GitHub: @Hieuej147
- Email: [email protected]
- NestJS Team - For the amazing framework
- Prisma Team - For the best ORM experience
- Stripe - For comprehensive payment API
- LangChain/LangGraph - For AI agent capabilities
Built with ❤️ using NestJS and TypeScript