CeKulit Backend API Documentation

"Cloud Infrastructure and Backend Services for AI-Powered Skin Analysis"

Contents

• Overview
• System Architecture
• Tech Stack
• Installation
• Endpoint Routes
• Endpoint Documentation
• Infrastructure
• Security
• Deployment
• Monitoring
• Progress Reports
• Contributors

Overview

CeKulit's backend infrastructure provides robust cloud services and APIs to support our AI-powered skin analysis application. Built on Google Cloud Platform, our architecture ensures scalable, secure, and reliable services for skin type classification and personalized skincare recommendations.

Key Features

• Secure REST API endpoints with JWT authentication
• AI model deployment for skin analysis
• User management and profile system
• Analysis history tracking
• Personalized skincare recommendations
• Real-time processing capabilities
• Automated scaling and load balancing

System Architecture

graph TB
    subgraph Client
        A[Mobile App] --> B[API Gateway]
    end
    
    subgraph Backend Services
        B --> C[Virtual Machine]
        C --> D[Authentication]
        C --> E[ML Model Service]
        C --> F[User Service]
    end
    
    subgraph Database
        F --> G[Fire Store]
        F --> H[Cloud Storage]
    end
    
    subgraph ML Infrastructure
        E --> I[TensorFlow Serving]
        I --> J[Model Registry]
    end

Loading

Tech Stack

Core Technologies

• Runtime: Node.js 18.x
• Framework: Express.js
• Database: Firestore
• Authentication: Firebase Auth
• Storage: Cloud Storage
• Deployment: Virtual Machine
• ML Serving: Flask

Installation

CeKulit requires Node.js v18+ to run.

Installing Dependencies

npm install

Environment Setup

# Copy environment template
cp .env.example .env

# Configure Google Cloud CLI
gcloud init
gcloud auth application-default login

Starting Server

# Development mode with hot reload
npm run dev

# Production mode
npm run start

Endpoint Routes

HTTP Method	Path	Description	Section
POST	/register	User registration	Authentication
POST	/login	Login authorization	Authentication
POST	/otp	One Time Password	Authentication
GET	/profile	Get user profile	User
PUT	/profile	Update user profile	User
POST	/predict	Process skin analysis	Analysis

Endpoint Documentation

Base URL

https://api.cekulit.app/v1

Authentication

All API requests (except registration and login) require authentication using Firebase JWT tokens:

Authorization: Bearer <firebase_token>

Register

• Endpoint: /api/v1/auth/register
• Method: POST
• Request Body:

{
    "name": "John Doe",
    "email": "john@example.com",
    "password": "securepass123",
    "passwordConfirm": "securepass123"
}

• Response (201 Created):

{
    "status": "success",
    "message": "User registered successfully",
    "data": {
        "id": "user123",
        "name": "John Doe",
        "email": "john@example.com"
    }
}

Login

• Endpoint: /api/v1/auth/login
• Method: POST
• Request Body:

{
    "email": "john@example.com",
    "password": "securepass123"
}

• Response (200 OK):

{
    "status": "success",
    "message": "Login successful",
    "token": "firebase_jwt_token",
    "data": {
        "id": "user123",
        "name": "John Doe",
        "email": "john@example.com"
    }
}

User Management

Get Profile

• Endpoint: /api/v1/users/profile
• Method: GET
• Response (200 OK):

{
    "status": "success",
    "data": {
        "id": "user123",
        "name": "John Doe",
        "email": "john@example.com",
        "skinType": "combination",
        "analysisCount": 5,
        "createdAt": "2024-01-15T08:30:00Z"
    }
}

Update Profile

• Endpoint: /api/v1/users/profile
• Method: PATCH
• Request Body:

{
    "name": "John Smith",
    "currentPassword": "oldpass123",
    "newPassword": "newpass123"
}

• Response (200 OK):

{
    "status": "success",
    "message": "Profile updated successfully",
    "data": {
        "id": "user123",
        "name": "John Smith",
        "email": "john@example.com"
    }
}

Skin Analysis

Process Analysis

• Endpoint: /api/v1/analysis/skin-type
• Method: POST
• Request Body: multipart/form-data

{
    "image": <file>,
    "additionalNotes": "Taken under natural lighting"
}

• Response (201 Created):

{
    "status": "success",
    "message": "Analysis completed successfully",
    "data": {
        "id": "analysis123",
        "skinType": "combination",
        "confidence": 0.95,
        "imageUrl": "https://storage.googleapis.com/cekulit-analysis/user123/analysis123.jpg",
        "recommendations": [
            {
                "id": "rec123",
                "category": "cleanser",
                "description": "Use a gentle, non-foaming cleanser"
            }
        ],
        "createdAt": "2024-01-15T08:30:00Z"
    }
}

Get Analysis History

• Endpoint: /api/v1/analysis/history
• Method: GET
• Query Parameters:
  • page: Page number (default: 1)
  • limit: Items per page (default: 10)
  • sortBy: Sort field (default: createdAt)
  • order: Sort order (asc/desc, default: desc)
• Response (200 OK):

{
    "status": "success",
    "data": {
        "items": [
            {
                "id": "analysis123",
                "skinType": "combination",
                "confidence": 0.95,
                "imageUrl": "https://storage.googleapis.com/cekulit-analysis/user123/analysis123.jpg",
                "createdAt": "2024-01-15T08:30:00Z"
            }
        ],
        "pagination": {
            "currentPage": 1,
            "totalPages": 3,
            "totalItems": 25,
            "itemsPerPage": 10
        }
    }
}

Recommendations

Get All Recommendations

• Endpoint: /api/v1/recommendations
• Method: GET
• Response (200 OK):

{
    "status": "success",
    "data": [
        {
            "id": "rec123",
            "skinType": "combination",
            "category": "cleanser",
            "description": "Use a gentle, non-foaming cleanser",
            "products": [
                {
                    "id": "prod123",
                    "name": "Gentle Cleanser",
                    "brand": "CeKulit",
                    "description": "Alcohol-free gentle cleanser"
                }
            ]
        }
    ]
}

Infrastructure

Google Cloud Resources

┌────────────────────┬────────────────────────┐
│ Service            │ Purpose                │
├────────────────────┼────────────────────────┤
│ Cloud Run          │ API hosting            │
│ Virtual Machine    │ Database               │
│ Cloud Storage      │ Image storage          │
│ Cloud Functions    │ Serverless operations  │
│ Cloud Build        │ CI/CD pipeline         │
│ Cloud Monitoring   │ System monitoring      │
└────────────────────┴────────────────────────┘

Database Schema

erDiagram
    USERS {
        string id PK
        string email
        string name
        string password_hash
        timestamp created_at
        timestamp updated_at
    }
    
    ANALYSIS {
        string id PK
        string user_id FK
        string skin_type
        float confidence
        string image_url
        json metadata
        timestamp analyzed_at
    }
    
    RECOMMENDATIONS {
        string id PK
        string skin_type FK
        string category
        string description
        json products
        timestamp created_at
    }
    
    USERS ||--o{ ANALYSIS : has
    ANALYSIS ||--o{ RECOMMENDATIONS : receives

Loading

Security

Implementation

• JWT-based authentication using Firebase Auth
• Role-based access control (RBAC)
• Request rate limiting
• Input validation and sanitization
• SQL injection prevention
• XSS protection
• CORS configuration
• Secure headers implementation

Best Practices

• Environment variable management
• Secure data transmission
• Regular security audits
• Automated vulnerability scanning

Security Headers

{
    "X-Frame-Options": "DENY",
    "X-Content-Type-Options": "nosniff",
    "X-XSS-Protection": "1; mode=block",
    "Content-Security-Policy": "default-src 'self'",
    "Strict-Transport-Security": "max-age=31536000; includeSubDomains"
}

Rate Limiting

{
    "window": "15m",
    "max": 100,
    "message": "Too many requests, please try again later.",
    "statusCode": 429
}

Deployment

Production Deployment

# Build Docker image
docker build -t cekulit-backend .

# Deploy to Cloud Run
gcloud run deploy cekulit-backend \
  --image gcr.io/cekulit/backend \
  --platform managed \
  --region asia-southeast1 \
  --allow-unauthenticated

CI/CD Pipeline

steps:
  - name: 'gcr.io/cloud-builders/docker'
    args: ['build', '-t', 'gcr.io/$PROJECT_ID/backend', '.']
  
  - name: 'gcr.io/cloud-builders/docker'
    args: ['push', 'gcr.io/$PROJECT_ID/backend']
  
  - name: 'gcr.io/google.com/cloudsdktool/cloud-sdk'
    entrypoint: gcloud
    args:
      - 'run'
      - 'deploy'
      - 'cekulit-backend'
      - '--image'
      - 'gcr.io/$PROJECT_ID/backend'
      - '--region'
      - 'asia-southeast1'

Monitoring

Key Metrics

• API response times
• Error rates
• Request volume
• Resource utilization
• User activity

Alerting Configuration

// Example alert policy
{
  "displayName": "High Error Rate Alert",
  "conditions": [{
    "displayName": "Error Rate > 5%",
    "conditionThreshold": {
      "filter": "metric.type=\"run.googleapis.com/request_count\"",
      "comparison": "COMPARISON_GT",
      "threshold": 5
    }
  }]
}

Progress Reports

Week 1: Infrastructure Setup ✅

• Cloud environment configuration
• Basic API structure
• Database schema design

Week 2: Core Development ✅

• Authentication implementation
• ML model deployment
• API endpoint development

Week 3: Integration 🚧

• Mobile app integration
• Performance optimization
• Security hardening

Week 4: Testing and Deployment 📋

• Load testing
• Documentation completion
• Production deployment

Contributors

Cloud Computing Team

• Reynal Novriadi (Universitas Riau)
  • Infrastructure Design
  • Auth Development
• Fatahillah Alif Pangaribowo (Institut Teknologi Dirgantara Adisutjipto)
  • API Development
  • DevOps
  • Security Implementation

Technical Advisors

• Nurrahman Hadi
• Candra Reza Prasetya Gannes

License

This project is licensed under the MIT License - see the LICENSE file for details.

Acknowledgments

• WHO for global skin health statistics
• Anthropic for AI assistance
• Our university partners for resources and support

---

Made with ❤️ by CeKulit Team

© 2024 CeKulit. All rights reserved.