AccessTrackAPI

📌 Description

A secure access control system API for managing user authentication, authorization, and entry logging in buildings or institutions.

🔎 The problem this API solves

Many facilities still rely on manual methods or outdated systems for access control, which can cause:

• ❌ No reliable tracking of who enters or exits
• ❌ Difficulty managing permission levels
• ❌ Security vulnerabilities

💡 The Solution I Developed:

A robust and scalable API that delivers:

• ✅ Secure authentication using JWT Tokens with role hierarchy (Admin, User, Visitor)
• ✅ Detailed entry/exit logging with timestamps
• ✅ Complete CRUD operations for user and visitor management
• ✅ Administrative dashboard for log viewing and reporting

🚀 Features

User Management

• User registration and authentication
• Role-based access control (Admin, User, Visitor)
• Password hashing for secure storage
• JWT token-based authentication

Access Control

• Entry validation for users and visitors
• Exit recording with timestamps
• Comprehensive logging of all access events

Admin Functionality

• Admin user creation and management
• User/visitor management (CRUD operations)
• Access log viewing and reporting

API Endpoints

🔑 Authentication & Security

This API uses JWT authentication. To access protected routes, obtain a token via the login endpoint and include it in the request headers:

 Authorization: Bearer YOUR_ACCESS_TOKEN

Authentication

• POST /v1/Users/CreateUser - Register a new regular user
• POST /v1/Users/login - Authenticate a user and get JWT token
• POST /v1/Admin/LoginAdmin - Authenticate an admin and get JWT token

Admin Operations

• POST /v1/Admin/CreateAdmin - Create a new admin (requires admin role)
• POST /v1/Admin/CreateFirstAdmin - Initialize the first root admin
• DELETE /v1/Admin/DeleteAdmin/{id} - Delete an admin (root admin only)
• DELETE /v1/Admin/DeleteUser/{id} - Delete a user
• PUT /v1/Admin/UpdateUser/{id} - Update user information
• GET /v1/Admin/UserLogs/{userId?} - Get access logs (all or specific user)
• GET /v1/Admin/VisitorLogs/{visitorId?} - Get visitor access logs

Visitor Management

• POST /v1/visitors/CreateVisitor - Create a new visitor (admin only)
• DELETE /v1/visitors/DeleteVisitor/{id} - Delete a visitor (admin only)

Access Control

• POST /v1/Entry/validate-entry - Validate user/visitor entry

User Operations

• GET /v1/Users/infos - Get user information and access logs

Demo:

📦 Installation & Setup

Prerequisites

• Docker Desktop (v20.10+)
• .NET SDK 9.0
• SQL Server (optional - included in Docker setup)

1. Clone this repository

 git clone https://github.com/LeonardoEnnes/AccessTrackAPI.git
cd AccessTrackAPI

2. Configure the enviroment variables:

   • Copy the .env.example file to .env

    cp .env.example .env

   • Open the .env file and update the following values:
     • DB_CONNECTION_STRING: Your SQL Server connection string
     • JWT_KEY: A secure secret key for JWT token generation

3. Build and run the application using Docker:

 docker-compose up --build

4. The API should now be running at: http://localhost:5130/swagger

For Development (Without Docker):

• Feel free to improve my code as you see fit.
• If you have any questions regarding this project, Please feel free to email me.

1. Restore Dependencies & Build

 dotnet restore
dotnet build

2. Configure User Secrets

 dotnet user-secrets
dotnet user-secrets set"ConnectionStrings:DefaultConnection""your-string-connection"
dotnet user-secrets set"JwtKey""your-jwt-key"

3. Apply Database Migrations

 dotnet ef database update

4. Run the Application

 dotnet run

🛠️ Technologies Used

• .NET (C#)
• Entity Framework
• SQL Server
• Docker

📂 Project Structure

.
├── Dependencies ├── Properties
│ └── launchSettings.json ├── src ├── Controllers
│ ├── AccessControlController.cs │ ├── AdminController.cs │ ├── UsersController.cs │ └── VisitorController.cs ├── Data ├── Extensions
│ └── RoleClaimExtension.cs ├── Migrations ├── Models
│ ├── Admins.cs │ ├── EntryLogs.cs │ ├── Users.cs │ └── Visitor.cs ├── Services
│ └── TokenService.cs ├── ViewModels
│ ├── Accounts │ ├── DTOs │ └── ResultViewModel.cs ├── AccessTrackAPI.http ├── Configuration.cs └── Program.cs 

📜 License

This project is licensed under the MIT License.

📧 Contact

• Author: Leonardo Ennes
• Email: leonardoennes@protonmail.com