A RESTful API built with FastAPI for managing personal tasks, with JWT-based authentication and full user isolation.

The project follows a layered architecture with clear separation of concerns:

app/
├── core/          # Config, database, security, dependency injection
├── models/        # SQLAlchemy ORM entities
├── repositories/  # Data access layer (CRUD)
├── services/      # Business logic and validation
├── schemas/       # Pydantic request/response models
└── routers/       # HTTP endpoints

Each layer depends only on the layer below it. Routers call services, services call repositories, repositories talk to the database.

• Python 3.14+
• PostgreSQL

# Clone the repository
git clone https://github.com/ramon-bernardo/task-vault.git
cd task-vault

# Create and activate a virtual environment
python -m venv .venv
source .venv/bin/activate  # Windows: .venv\Scripts\activate

# Install dependencies
pip install -r requirements.txt

# Configure environment variables
cp .env.example .env
# Edit .env with your database URL and secret key

# Run database migrations
alembic upgrade head

# Start the server
uvicorn app.main:app --reload

The API will be available at http://localhost:8000. Interactive docs at http://localhost:8000/docs.

Register — POST /auth/register

{
  "email": "[email protected]",
  "password": "strongpassword"
}

Login — POST /auth/login

Content-Type: application/x-www-form-urlencoded

[email protected]&password=strongpassword

Response:

{
  "access_token": "<jwt>",
  "token_type": "bearer"
}

All task endpoints require an Authorization: Bearer <token> header.

Create Task — POST /tasks

{
  "title": "Buy groceries",
  "description": "Milk, eggs, bread"
}

Update Task — PATCH /tasks/{id}

All fields are optional:

{
  "title": "Buy groceries",
  "description": "Milk, eggs, bread, butter",
  "done": true
}

The API returns standard HTTP status codes with a JSON detail message:

Example error response:

{
  "detail": "Task not found"
}

Tests use an in-memory SQLite database so no external database is required.

pytest

The test suite covers:

• Auth: registration, login, duplicate email handling
• Tasks: full CRUD, ownership enforcement, pagination, task isolation between users

A Postman collection is available at Postman/Collection.json.

Import it into Postman, set base_url to http://localhost:8000, and run the Login request first — the collection's test script automatically saves the JWT token to the access_token variable for all subsequent requests.

This project is licensed under the MIT License.