Using any tech stack you are comfortable with (PHP, Node, any data layer backend, or none) create a basic Game Library web application.

The library will contain two functions:

• Adding new titles
• Searching for titles.

Things to consider when developing a solution:

• The server should use a well-designed, documented REST API
• Modern front end practices and design
• A description of limitations of the web application. For instance:
  • Security is not necessary for the test, but describing how the application would be secured is important.
  • Testing. How would your service we tested? What testing frameworks would you use?

gamesApp is based on the default template project for Foundation for Apps, powered by Gulp, Angular, and libsass.

You'll need the following software installed to get started.

• Frontend
  • Node.js: Use the installer for your OS.
  • Git: Use the installer for your OS.
  • Gulp and Bower: Run npm install -g gulp bower
    • Depending on how Node is configured on your machine, you may need to run sudo npm install -g gulp bower instead, if you get an error with the first command.
• API
  • Apache: Use the installer for your OS.
  • PHP: Use the installer for your OS. PHP 5.1 is required for PHP Data Objects library.
  • MySQL: Use the installer for your OS.

Clone this repository, where app is the name of your app.

git clone https://github.com/kakauandme/gamesApp.git app

Change into the directory.

cd app

Install the dependencies. If you're running Mac OS or Linux, you may need to run sudo npm install instead, depending on how your machine is configured.

npm install
bower install

For data initialisation, create and select rest_api_demo database.

mysql > CREATE DATABASE rest_api_demo;
mysql > USE rest_api_demo;

Execute dump.sql query. Additionally check api/includes/config.php file and adjsut database settings if nececery.

mysql < dump.sql;

To build the project use the build command. This will compile the Sass and assemble Angular app.

npm start build

Now go to http://localhost/~username/app/build/ in your browser to see it in action. Where app is the name of your app and ~username/ is a location of a default web-server directory on your installation.

Basic RESTful API interface was created with several endpoints accessible at /api/v1/

• GET
  • /games/ - fetches all games
  • /games/id - pulls game with matching id
  • /games/search?key=value - lists games with matching key-value tuple
• POST
  • /games/?key1=value1&key2=value - creates new game using passed keys and values

• /api/v1/games/search?description=lorem&name=real - searches by name and description
• /api/v1/games/4 - displays game by id
• /api/v1/film - not implemented endpoint

[
    {
        "id": "1",
        "name": "Real Racing",
        "description": "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Duis mollis, est non commodo luctus, nisi erat porttitor ligula, eget lacinia odio sem nec elit. Morbi leo risus, porta ac consectetur ac, vestibulum at eros."
    },
    {
        "id": "2",
        "name": "Need for Speed",
        "description": "Nullam quis risus eget urna mollis ornare vel eu leo. Vestibulum id ligula porta felis euismod semper."
    },
    {
        "id": "3",
        "name": "Fifa 2016",
        "description": "Donec id elit non mi porta gravida at eget metus."
    },
    {
        "id": "4",
        "name": "Sims",
        "description": "Nullam id dolor id nibh ultricies vehicula ut id elit."
    },
    {
        "id": "5",
        "name": "Battelfield",
        "description": "Maecenas sed diam eget risus varius blandit sit amet non magna. Integer posuere erat a ante venenatis dapibus posuere velit aliquet. Lorem ipsum dolor sit amet, consectetur adipiscing elit."
    },
    {
        "id": "6",
        "name": "Real Racing 4",
        "description": "Vestibulum id ligula porta felis euismod semper. Aenean lacinia bibendum nulla sed consectetur. Donec sed odio dui."
    }
]

Here are few simple steps that will make RESTful API secure and robust

• Authentication and session management
• Protect against cross-site request forgery
• Input validation & SQL injection prevention
• Anti-farming
• Whitelist allowable methods & hosts

• Chrome Extention for manual testing and exploration
• Unit testing - a script wich will test successful and unsuccessful test cases, including randomly generated requests
• High load testing - testing server capabilities