🎬 Content Review API

A fully authenticated REST API built using Django REST Framework for managing streaming platforms, artists, multimedia content, and user-submitted reviews.

This backend project supports token-based authentication, secure review submissions, and admin-level control over platform data — all wrapped in clean, filterable, and paginated endpoints.

---

🌐 Live Demo

Base URL: https://content-review.onrender.com

🔒 All endpoints require a valid token, including GET requests.

---

✨ Features

• 🔐 Token-based user registration and login
• 🎥 CRUD for streaming content, artists, and platforms
• ✍️ One-review-per-user restriction per content
• 🔎 Filtering and search on most endpoints
• 📘 Human-readable response fields (e.g., names instead of IDs)
• 🚦 View-specific throttling and per-action limits
• 📄 Multiple pagination strategies supported
• ⚙️ SQLite + WhiteNoise + Render deployment-ready setup

---

🚀 Getting Started (Local)

# Clone the repository
git clone https://github.com/bitsbuild/ContentReviewBackend.git
cd ContentReviewBackend

# Create virtual environment
python -m venv venv
source venv/bin/activate  # Windows: venv\Scripts\activate

# Install dependencies
pip install -r requirements.txt

# Apply migrations and run the dev server
python manage.py migrate
python manage.py runserver

---

🔑 Authentication

This project uses Token Authentication via Django REST Framework.

📌 All API requests must include the token in the header — even for GET.

How to Use Token in Postman

1. After registration or login, copy the token
2. In Postman, go to the Headers tab
3. Add:

Key: Authorization
Value: Token <your_token_here>

✅ Example:

Authorization: Token 9a14abf7d93a4112345abc...

---

📫 API Endpoints and Usage

Base paths:

• /api/ → content, reviews, artists, platforms
• /user/ → register, login, delete

---

👤 User Endpoints

🔸 Register

POST /user/create/

{
  "username": "johndoe",
  "email": "john@example.com",
  "password": "securepassword",
  "confirm_password": "securepassword"
}

Returns:

{
  "status": "Account Created Successfully",
  "token": "<your_token_here>"
}

---

🔸 Login (Obtain Token)

POST /user/token/

{
  "username": "johndoe",
  "password": "securepassword"
}

Returns:

{
  "token": "<your_token_here>"
}

---

🔸 Delete Account

POST /user/delete/ 🔒 Requires Token Auth

Deletes the currently authenticated user.

---

🎞️ Content Endpoints

As Per Latest Update Rating Based On Average Numeric Rating Of All Reviews For The Particular Piece Will Also Be Up For Display In "content_rating" Field For Content Endpoints In GET Method.

🔹 List Content

GET /api/contents/ 🔒 Requires Token Auth

Supports:

• Filtering: ?artists=<id>&content_platform=<id>&content_released=true

• Search: ?search=platform_name or ?search=artist_name

• Pagination options:

  • Page-based: ?p=2 or ?page=2, ?size=5
  • Limit-offset: ?limit=5&start=10
  • Cursor-based: ?autopage=<cursor_string>

📘 Sample Response:

{
  "content_name": "Inception",
  "content_platform": "Netflix",
  "artists": ["Hans Zimmer", "Leonardo DiCaprio"],
  "reviews": [...]
}

📌 All related fields are shown as names instead of raw IDs.

---

🔹 Create Content

POST /api/contents/ 🔒 Admin Only (is_staff=True)

{
  "content_name": "Inception",
  "content_description": "Sci-fi thriller",
  "content_released": true,
  "content_platform": "<platform_id>",
  "artists": ["<artist_id_1>", "<artist_id_2>"]
}

---

🧑‍🎤 Artist Endpoints

GET /api/artists/ 🔒 Requires Token Auth 🔒 Write Access: Admin Only

Supports:

• Search: ?search=zimmer

{
  "artist_name": "Hans Zimmer",
  "artist_about": "Film Composer"
}

---

📺 Platform Endpoints

GET /api/platforms/ 🔒 Requires Token Auth 🔒 Write Access: Admin Only

Supports:

• Search: ?search=netflix

{
  "platform_name": "Netflix",
  "platform_url": "https://netflix.com"
}

---

✍️ Review Endpoints

GET /api/reviews/ 🔒 Requires Token Auth

Supports:

• Filtering: ?review_movie=<id>&review_stars=5
• Search: ?search=Inception

📌 Review response shows review_user and review_movie as names.

---

🔹 Create Review

POST /api/reviews/ 🔒 Requires Token Auth

{
  "review_name": "Masterpiece!",
  "review_body": "Brilliant visuals and music",
  "review_stars": 5,
  "review_movie": "<content_id>"
}

📌 Each user can post only one review per content (enforced via DB constraint). 📌 Only the creator can update/delete their review.

---

🔍 Filters & Search

Endpoint	Filters	Search Fields
/api/contents/	artists, content_platform, content_released	artists__artist_name, content_platform__platform_name
/api/artists/	—	artist_name, artist_about
/api/platforms/	—	platform_name, platform_about, platform_url
/api/reviews/	review_movie, review_stars, review_user	review_movie__content_name

---

📄 Pagination Strategies

Type	Example URL Params	Notes
Page Number	?page=2 or ?p=2, ?size=5	Default strategy. Supports p= alias
Limit-Offset	?limit=5&start=10	Offset-based pagination
Cursor-Based	?autopage=<cursor>	Uses content_created for ordering

Max page size: 30 items Invalid page requests return a clear error message.

---

🚦 Throttling

Throttle behavior is enforced globally and per-view:

Scope	Rate
Anonymous (anon)	30 requests/min
Authenticated (user)	60 requests/min
Content Views	60 requests/min
Platform Views	60 requests/min
Artist Views	60 requests/min
Review (list)	60 requests/min
Review (write)	10 requests/hour

These settings are managed using custom throttle classes and scoped via settings.

---

🛡️ Permissions Overview

Resource	Read Access	Write Access
Users (create/token/delete)	Open (with throttle)	🔒 Delete: Token Required
Content / Platform / Artist	🔒 Auth Required	🔒 Admin Only (is_staff=True)
Reviews	🔒 Auth Required	🔒 Only creator can edit/delete

✅ Permissions are enforced at both view and object level using DRF permissions. ❌ No anonymous access is permitted — not even for viewing data.

---

⚙️ Tech Stack

• Python 3.10
• Django 5.x
• Django REST Framework
• SQLite (used in both development and deployment)
• WhiteNoise (for static file handling)
• Render.com (deployment)
• Postman (for API testing)

---

🪪 License

This project is released under the MIT License.

---