REST API Builder — Session #847

I'll build a production-ready REST API for your task management system. Here's the architecture I'm going with: The API will use Express with TypeScript for type safety and a clean developer experience. For authentication, I'll implement JWT-based auth with access and refresh tokens, bcrypt password hashing, and role-based access control. This gives you secure, stateless authentication that scales well. For the database layer, I'll use PostgreSQL with Prisma as the ORM. Prisma gives us type-safe database queries, easy migrations, and excellent TypeScript integration. The schema will include users, tasks, task assignments, and notification preferences tables. Real-time notifications will be handled through WebSocket connections using the ws library. When a task is created, updated, or assigned, relevant users will receive instant notifications through their WebSocket connection. I'll also include a fallback polling endpoint for clients that can't maintain WebSocket connections.

Here's the complete implementation. I've set up the API routes, authentication middleware, and the database schema:

import express from 'express';
import { authMiddleware } from './middleware/auth';
import { TaskController } from './controllers/task';
import { AuthController } from './controllers/auth';
import { NotificationService } from './services/notifications';

const app = express();
const notifications = new NotificationService();

// Auth routes
app.post('/api/auth/register', AuthController.register);
app.post('/api/auth/login', AuthController.login);
app.post('/api/auth/refresh', AuthController.refreshToken);

// Task routes (protected)
app.get('/api/tasks', authMiddleware, TaskController.list);
app.post('/api/tasks', authMiddleware, TaskController.create);
app.put('/api/tasks/:id', authMiddleware, TaskController.update);
app.delete('/api/tasks/:id', authMiddleware, TaskController.delete);

// WebSocket for real-time notifications
notifications.initialize(app);

app.listen(3001, () => {
  console.log('Task API running on port 3001');
});