feat: Create product image upload and storage integration

backend/firebase-service-account.json

@@ -0,0 +1,3 @@
+{
+  "get it from your firebase console to use store image feature"
+}

backend/package.json

@@ -11,15 +11,18 @@
   "author": "",
   "license": "MIT",
   "dependencies": {
+    "@aws-sdk/client-s3": "^3.921.0",
     "bcryptjs": "^3.0.2",
     "body-parser": "^1.20.2",
     "cookie-parser": "^1.4.7",
     "cors": "^2.8.5",
     "dotenv": "^16.6.1",
     "express": "^4.21.2",
+    "firebase-admin": "^13.5.0",
     "jsonwebtoken": "^9.0.2",
     "mongoose": "^8.19.2",
     "morgan": "^1.10.0",
+    "multer": "^2.0.2",
     "nodemailer": "^7.0.9",
     "nodemon": "^3.1.10",
     "uuid": "^13.0.0"

backend/src/app.ts

@@ -14,9 +14,10 @@ import bcrypt from "bcryptjs";
 import cookieParser from "cookie-parser";
 import { signAccessToken, signRefreshToken, verifyRefreshToken } from "./controllers/auth";
 import { authenticate, AuthRequest } from "./middleware/authMiddleware";
+import dotenv from "dotenv";
 
 const app: Application = express();
-import dotenv from "dotenv";
+
 dotenv.config();
 
 // Middleware setup

backend/src/controllers/product.controller.ts

@@ -3,71 +3,37 @@ import Product from "../models/product.model";
 
 export const createProduct = async (req: Request, res: Response) => {
   try {
-    const { name, description, price, category, stock } = req.body;
+    const { name, description, price, category, stock, imageUrl, condition } = req.body;
 
-    if (!name || !description || !price) {
-      return res.status(400).json({ message: "Missing required fields" });
+    if (!name || !description || !price || !category || !stock) {
+      return res.status(400).json({ error: "Missing required field(s)" });
     }
 
-    const product = await Product.create({
+    const product = new Product({
       name,
       description,
       price,
       category,
       stock,
+      imageUrl,
+      condition,
     });
-    return res.status(201).json(product);
-  } catch (error) {
-    console.error("Create Product Error:", error);
-    res.status(500).json({ message: "Server error" });
+
+    await product.save();
+    res.status(201).json(product);
+  } catch (err: any) {
+    res.status(500).json({ error: err.message || "Server error" });
   }
 };
 
 export const getProducts = async (req: Request, res: Response) => {
   try {
-    const { search, category, minPrice, maxPrice, sort } = req.query;
-
-    const query: any = {};
-
-    // 🔍 Search by name or description
-    if (search) {
-      query.$or = [
-        { name: { $regex: search, $options: "i" } },
-        { description: { $regex: search, $options: "i" } },
-      ];
-    }
-
-    // 🏷️ Filter by category
-    if (category && category !== "all") {
-      query.category = category;
-    }
-
-    // 💰 Filter by price range
-    if (minPrice || maxPrice) {
-      query.price = {};
-      if (minPrice) query.price.$gte = Number(minPrice);
-      if (maxPrice) query.price.$lte = Number(maxPrice);
-    }
-
-    // 🧾 Build base query
-    let mongoQuery = Product.find(query);
-
-    // 📊 Sorting
-    if (sort === "asc" || sort === "lowToHigh")
-      mongoQuery = mongoQuery.sort({ price: 1 });
-    else if (sort === "desc" || sort === "highToLow")
-      mongoQuery = mongoQuery.sort({ price: -1 });
-    else mongoQuery = mongoQuery.sort({ createdAt: -1 });
-
-    const products = await mongoQuery;
-
+    const products = await Product.find().sort({ createdAt: -1 });
     res.status(200).json(products);
-  } catch (error) {
-    console.error("Get Products Error:", error);
-    res.status(500).json({ message: "Server error" });
+  } catch (err: any) {
+    res.status(500).json({ error: err.message });
   }
 };
-
 export const getProductById = async (req: Request, res: Response) => {
   try {
     const product = await Product.findById(req.params.id);

backend/src/middleware/uploadMiddleware.ts

@@ -0,0 +1,19 @@
+import multer from "multer";
+
+const upload = multer({
+  storage: multer.memoryStorage(),
+  limits: { fileSize: 2 * 1024 * 1024 }, 
+  fileFilter: (_req: any, file: { mimetype: string; }, cb: (arg0: Error | null, arg1: boolean | undefined) => void) => {
+    if (
+      file.mimetype === "image/jpeg" ||
+      file.mimetype === "image/png" ||
+      file.mimetype === "image/webp"
+    ) {
+      cb(null, true);
+    } else {
+      cb(new Error("Invalid file type. Only JPEG, PNG, WEBP allowed."));
+    }
+  },
+});
+
+export default upload;

backend/src/models/product.model.ts

@@ -6,6 +6,7 @@ export interface IProduct extends Document {
     price: number;
     category?: string;
     stock: number;
+    imageUrl?: string;
     createdAt: Date;
     updatedAt: Date;
 }
@@ -17,8 +18,9 @@ const productSchema = new Schema<IProduct>(
         price: { type: Number, required: true },
         category: { type: String },
         stock: { type: Number, default: 0 },
+        imageUrl: { type: String },
     },
     { timestamps: true }
 );
 
-export default mongoose.model<IProduct>("Product", productSchema);
+export default mongoose.model<IProduct>("Product", productSchema);

backend/src/routes/cartRoutes.ts

@@ -6,13 +6,15 @@ import {
   getCart,
   checkout,
 } from "../controllers/cart.controller";
+import { authenticate } from "../middleware/authMiddleware";
 
 const router: Router = express.Router();
 
-router.post("/", addItem);
-router.patch("/:itemId", updateQuantity);
-router.delete("/:itemId", removeItem);
-router.get("/", getCart);
-router.post("/checkout", checkout);
+//Protected routes
+router.post("/", authenticate, addItem);
+router.patch("/:itemId", authenticate, updateQuantity);
+router.delete("/:itemId", authenticate, removeItem);
+router.get("/", authenticate, getCart);
+router.post("/checkout", authenticate, checkout);
 
-export default router;
+export default router;

frontend/.env

@@ -0,0 +1 @@
+VITE_API_BASE_URL=http://localhost:5000

frontend/.env.example

@@ -0,0 +1 @@
+VITE_API_BASE_URL=http://localhost:5000