A Flask-based REST API for managing personal book collections with user authentication, admin controls, and comprehensive book management features.

• User Registration & Authentication - JWT-based authentication system
• Role-based Access Control - User and Admin roles with different permissions
• Account Security - Password hashing, token blacklisting, and ban/unban functionality
• Rate Limiting - Built-in rate limiting to prevent abuse

• CRUD Operations - Create, Read, Update, Delete books in your collection
• Search, Filter & Pagination - Search with sorting options & Efficient pagination
• Soft Delete - Books are marked as deleted but can be recovered
• Favorites System - Mark books as favorites for quick access
• Universal Database - Universal Book, Author, Category, Publisher database.
• Rating & Review - Rate and write Review a book.
• Custom List - User created custom list(5 list/user) with privacy control.

• User Management - Ban/unban users, promote users to admin
• Book Oversight - View all books across all users
• Token Management - Clean up expired JWT tokens
• Admin Controls - Full administrative access to the system

• Backend: Flask, Flask-RESTful
• Database: SQLAlchemy with SQLite
• Authentication: Flask-JWT-Extended
• Validation: Marshmallow
• Security: Argon2-cffi password hashing
• Rate Limiting: Flask-Limiter
• Frontend: HTML, CSS, Vanilla JS

For setup and installation instructions, see docs/setup.md.

For API endpoints instructions, see docs/api_reference.md.

• Password Hashing: Uses Werkzeug's secure password hashing
• JWT Token Management: Access and refresh tokens with blacklisting
• Rate Limiting: Prevents API abuse with configurable limits
• Input Validation: Marshmallow schemas validate all inputs
• Role-based Access: Admin-only endpoints protected
• SQL Injection Prevention: SQLAlchemy ORM protects against SQL injection

Default rate limits:

• General: 200 requests per day, 50 per hour
• Registration: 3 attempts per day
• Login: 3 attempts per day
• Book operations: 50 per day

This project is licensed under the MIT License .

For support, email zayed.ah06@gmail.com or create an issue in the GitHub repository.

• Added a basic JavaScript and HTML frontend to consume the API
• Implemented rating and reviews functionality for books
• Improved core logic and fixed various bugs for better stability

• Initial release
• User authentication and authorization
• Book CRUD operations
• Admin panel
• Rate limiting
• JWT token management