API Contract & Endpoints

const RAW_BASE = import.meta.env.VITE_API_BASE;
export const API_BASE = (RAW_BASE?.trim().length > 0)
  ? RAW_BASE
  : '/api';  // Default to relative path

const httpClient = axios.create({
  baseURL: API_BASE,
  withCredentials: true,  // Include session cookies
});

{
  "email": "user@example.com",
  "fullName": "John Doe",
  "role": "ADMIN",
  "pictureUrl": "https://lh3.googleusercontent.com/..."
}

{
  "error": "unauthorized",
  "message": "No valid session",
  "timestamp": "2025-11-20T10:00:00.000Z",
  "correlationId": "SSP-1700551200000-1234"
}

useEffect(() => {
  httpClient.get('/auth/me')
    .then(res => setUser(res.data))
    .catch(error => {
      if (error.response?.status === 401) {
        setUser(null);  // Not logged in
        // Show login page
      }
    });
}, []);

const handleLogout = () => {
  httpClient.post('/auth/logout')
    .then(() => {
      setUser(null);
      navigate('/login');
      toast.success('Logged out');
    })
    .catch(error => toast.error('Logout failed'));
};

[
  {
    "id": "SUP001",
    "name": "Acme Corporation",
    "email": "contact@acme.com",
    "phoneNumber": "+1-555-0100"
  },
  {
    "id": "SUP002",
    "name": "Globex Corp",
    "email": "info@globex.com",
    "phoneNumber": "+1-555-0101"
  }
]

const [suppliers, setSuppliers] = useState([]);

useEffect(() => {
  httpClient.get('/suppliers')
    .then(res => setSuppliers(res.data))
    .catch(error => toast.error('Failed to load suppliers'));
}, []);

{
  "id": "SUP001",
  "name": "Acme Corporation",
  "email": "contact@acme.com",
  "phoneNumber": "+1-555-0100"
}

{
  "error": "not_found",
  "message": "Supplier not found: SUP001",
  "timestamp": "2025-11-20T10:00:00.000Z",
  "correlationId": "SSP-1700551200000-1234"
}

42

[
  {
    "id": "SUP001",
    "name": "Acme Corporation",
    "email": "contact@acme.com",
    "phoneNumber": "+1-555-0100"
  }
]

{
  "id": "SUP003",
  "name": "New Supplier Inc",
  "email": "sales@newsupplier.com",
  "phoneNumber": "+1-555-0200"
}

{
  "error": "bad_request",
  "message": "Validation failed: email must be valid format, name is required",
  "timestamp": "2025-11-20T10:00:00.000Z",
  "correlationId": "SSP-1700551200000-1234"
}

{
  "error": "conflict",
  "message": "Supplier with name 'New Supplier Inc' already exists",
  "timestamp": "2025-11-20T10:00:00.000Z",
  "correlationId": "SSP-1700551200000-1234"
}

{
  "id": "SUP001",
  "name": "Acme Corporation Updated",
  "email": "newemail@acme.com",
  "phoneNumber": "+1-555-0100"
}

{
  "error": "not_found",
  "message": "Supplier not found: SUP001",
  "timestamp": "2025-11-20T10:00:00.000Z",
  "correlationId": "SSP-1700551200000-1234"
}

{
  "id": "INV001",
  "name": "Widget A",
  "sku": "WID-A-001",
  "supplierId": "SUP001",
  "quantity": 150,
  "reorderLevel": 50,
  "unitPrice": 29.99,
  "lastRestockDate": "2025-11-15T00:00:00.000Z"
}

[
  {
    "id": "STK001",
    "itemId": "INV001",
    "itemName": "Widget A",
    "quantity": 50,
    "reason": "SALE",
    "reference": "ORDER-2025-1001",
    "timestamp": "2025-11-20T10:30:00.000Z",
    "userId": "user@example.com"
  }
]

{
  "totalSuppliers": 42,
  "totalInventoryItems": 256,
  "totalStockValue": 125000.50,
  "lowStockCount": 12,
  "recentMovements": 3456
}

{
  "content": [
    { "id": "SUP001", "name": "Acme", ... },
    { "id": "SUP002", "name": "Globex", ... }
  ],
  "totalElements": 42,
  "totalPages": 3,
  "pageNumber": 0,
  "pageSize": 20,
  "hasNext": true,
  "hasPrevious": false
}

{
  "error": "error_type_in_snake_case",
  "message": "Human-readable error description",
  "timestamp": "2025-11-20T10:00:00.000Z",
  "correlationId": "SSP-1700551200000-1234"
}

import axios from 'axios';

const httpClient = axios.create({
  baseURL: '/api',
  withCredentials: true,
  timeout: 30_000,
});

// Global error handling
httpClient.interceptors.response.use(
  (res) => res,
  (error) => {
    if (error.response?.status === 401) {
      // Redirect to login on auth failure
      window.location.href = '/login';
    }
    return Promise.reject(error);
  }
);

export default httpClient;

import httpClient from '../httpClient';
import { SupplierDTO } from './types';

export const supplierApi = {
  listAll: () => httpClient.get<SupplierDTO[]>('/suppliers'),
  
  getById: (id: string) => httpClient.get<SupplierDTO>(`/suppliers/${id}`),
  
  search: (name: string) => 
    httpClient.get<SupplierDTO[]>('/suppliers/search', { params: { name } }),
  
  create: (data: SupplierDTO) => 
    httpClient.post<SupplierDTO>('/suppliers', data),
  
  update: (id: string, data: SupplierDTO) => 
    httpClient.put<SupplierDTO>(`/suppliers/${id}`, data),
  
  delete: (id: string) => 
    httpClient.delete(`/suppliers/${id}`),
};

import { supplierApi } from '@/api/inventory/supplierApi';

const SuppliersPage = () => {
  const [suppliers, setSuppliers] = useState<SupplierDTO[]>([]);
  const [loading, setLoading] = useState(true);
  const [error, setError] = useState<string | null>(null);

  useEffect(() => {
    supplierApi.listAll()
      .then(res => setSuppliers(res.data))
      .catch(err => setError(err.response?.data?.message))
      .finally(() => setLoading(false));
  }, []);

  if (loading) return <Spinner />;
  if (error) return <Error message={error} />;
  
  return <SupplierTable suppliers={suppliers} />;
};

// Public (demo mode)
@PreAuthorize("isAuthenticated() or @appProperties.demoReadonly")
@GetMapping
public ResponseEntity<List<SupplierDTO>> listAll() { ... }

// Authenticated only
@PreAuthorize("isAuthenticated()")
@GetMapping("/{id}")
public ResponseEntity<SupplierDTO> getById(@PathVariable String id) { ... }

// Admin only
@PreAuthorize("hasRole('ADMIN')")
@PostMapping
public ResponseEntity<SupplierDTO> create(@Valid @RequestBody SupplierDTO dto) { ... }