hemanthghy/blog-management-system

Purpose and Runtime

A Spring Boot REST API for blog management: registration/login, JWT-authenticated access, role-based authorization, post CRUD, and comment operations. It runs on Java 21 with Spring Boot/Security, Spring Data JPA/Hibernate, Maven, and MySQL. Application bootstrap: src/main/java/com/ghy/blogmanagementsystem/BlogManagementSystemApplication.java; runtime properties: src/main/resources/application.yml.

HTTP API Boundary

Controllers expose the public REST surface: authentication at /api/auth, posts at /api/posts, comments at /api/comments, plus user-oriented operations. They accept validated request DTOs and return response DTOs rather than entities.

Paths: src/main/java/com/ghy/blogmanagementsystem/controller/AuthController.java, src/main/java/com/ghy/blogmanagementsystem/controller/BlogPostController.java, src/main/java/com/ghy/blogmanagementsystem/controller/CommentController.java.

Authentication and Authorization Pipeline

Login/register flows delegate to authentication services; credentials are BCrypt-protected and successful login produces a JWT. For protected requests, the security filter extracts and validates Bearer tokens, loads the user principal, and establishes Spring Security context. Security configuration defines access rules and the JWT failure response.

Paths: src/main/java/com/ghy/blogmanagementsystem/config/SecurityConfig.java, src/main/java/com/ghy/blogmanagementsystem/security/JwtAuthenticationFilter.java, src/main/java/com/ghy/blogmanagementsystem/security/JwtService.java.

Domain and Persistence Model

JPA entities model User, BlogPost, and Comment, with shared persistence fields in a base entity. Role distinguishes USER and ADMIN authorization. Repository interfaces form the database boundary to MySQL/Hibernate for each aggregate.

Paths: src/main/java/com/ghy/blogmanagementsystem/entity/User.java, src/main/java/com/ghy/blogmanagementsystem/entity/BlogPost.java, src/main/java/com/ghy/blogmanagementsystem/entity/Comment.java.

Service Layer and Ownership Rules

Service implementations hold application workflows: account creation/authentication, post lifecycle, comment lifecycle, existence checks, and ownership/role decisions before mutation or deletion. Controllers depend on service interfaces, isolating HTTP concerns from business and persistence logic.

Paths: src/main/java/com/ghy/blogmanagementsystem/service/AuthServiceImpl.java, src/main/java/com/ghy/blogmanagementsystem/service/BlogPostServiceImpl.java, src/main/java/com/ghy/blogmanagementsystem/service/CommentServiceImpl.java.

Data Translation and Error Boundary

Request DTOs constrain inbound registration, login, post, and comment payloads; MapStruct-style mappers translate entities to response contracts. A global exception handler converts domain/security failures into consistent API error responses instead of leaking implementation exceptions.

Paths: src/main/java/com/ghy/blogmanagementsystem/dto/request/CreatePostRequest.java, src/main/java/com/ghy/blogmanagementsystem/mapper/BlogPostMapper.java, src/main/java/com/ghy/blogmanagementsystem/exception/GlobalExceptionHandler.java.

Supporting Integration

OpenAPI configuration publishes Swagger UI at the documented local endpoint. CustomUserDetailsService bridges persisted users to Spring Security, while SecurityUtil supplies the authenticated-user context to ownership-sensitive service operations.

Paths: src/main/java/com/ghy/blogmanagementsystem/config/OpenApiConfig.java, src/main/java/com/ghy/blogmanagementsystem/security/CustomUserDetailsService.java, src/main/java/com/ghy/blogmanagementsystem/util/SecurityUtil.java.