This repository contains a full-stack vending machine web application built as part of my software engineering internship and academic project. It demonstrates backend API development, frontend design, and implementation of automated testing (unit, integration, performance, and security).

VendingMachineProject/
├── backend/                   # FastAPI application (Python)
│   ├── main.py
│   ├── database.py
│   ├── models.py
│   ├── routers/
│   │   ├── items.py
│   │   └── users.py
│   ├── integration_tests/
│   │   ├── test_items.py
│   │   └── test_users.py
│   └── integration_tests/
│       ├── test_add_item.py
│       ├── test_login.py
│       └── ...
├── frontend/                  # React + Next.js app (TypeScript)
│   └── ...
└── README.md

⚙️ Technologies Used

• CRUD operations for items (products)
• User login and role-based actions
• Purchasing and revenue tracking logic
• SQLAlchemy ORM for PostgreSQL database
• Exception handling and clean API responses

• Clean and responsive UI
• Item list display and filtering
• Forms for adding/editing items
• Purchase logic and role management
• Admin/user view separation

   cd backend
   poetry install
   poetry run uvicorn main:app --reload

Make sure PostgreSQL is running and the connection string in database.py is set correctly.

   cd frontend
   npm install
   npm run dev

• Covered major endpoints using FastAPI TestClient
• Tested input validation, CRUD logic, error handling
• Verified DB interactions (in-memory PostgreSQL setup)

• Load tested GET, POST, DELETE endpoints
• Simulated 50, 100, and 200 users
• Measured response time, throughput, and scalability

📊 Example Throughput Summary:

📈 Graphs and screenshots are included in the documentation folder.

• Manual and automated scans against SQLi, XSS
• No critical vulnerabilities detected
• Recommendations documented for safer auth/storage

Full documentation includes:

• 📄 Project goal and requirements
• ⚙️ Strategy for test automation
• 🧪 Detailed results (tables + graphs)
• 🔐 Security threats and mitigation
• 📌 Recommendations for improvement

Link: https://docs.google.com/document/d/1G36DLFKej4E9RbmQjXXkdt_7UqTfAFUIIGTxOHHrBGI/edit?usp=sharing

• Practical use of FastAPI dependency injection and exception handling
• Integration of testing at multiple levels (unit → performance)
• Using JMeter for real-world load simulation
• Writing secure and modular full-stack applications

• LinkedIn: Harun Aliefendic
• Email: [email protected]
• GitHub: @HFenda