API

app.py

@@ -142,12 +142,13 @@ async def health_check():
     }
 
 @app.post("/login")
-async def login(customer_id: str):
+async def login(customer_id: str, password: str):
     """
-    Login endpoint to validate customer ID
+    Login endpoint to validate customer ID and password
     
     Parameters:
     - customer_id: The ID of the customer to validate
+    - password: Password (first three chars of customer_id + "123")
     
     Returns:
     - JSON object containing login status and message
@@ -156,30 +157,42 @@ async def login(customer_id: str):
         # Convert customer_id to string to match the format in purchase_history
         customer_id = str(customer_id)
         
-        # Check if customer exists in the purchase history
+        # Generate expected password (first three chars + "123")
+        expected_password = f"{customer_id[:3]}123"
+        
+        # Check if customer exists and password matches
         if customer_id in purchase_history['Customer_Id'].unique():
-            # Get customer's basic information
-            customer_data = purchase_history[purchase_history['Customer_Id'] == customer_id]
-            total_purchases = len(customer_data)
-            total_spent = customer_data['Amount (In Dollars)'].sum()
-            
-            # Convert last purchase date to datetime if it's not already
-            last_purchase = pd.to_datetime(customer_data['Purchase_Date'].max())
-            last_purchase_str = last_purchase.strftime('%Y-%m-%d')
-            
-            return JSONResponse(
-                status_code=status.HTTP_200_OK,
-                content={
-                    "status": "success",
-                    "message": "Login successful",
-                    "customer_id": customer_id,
-                    "customer_stats": {
-                        "total_purchases": total_purchases,
-                        "total_spent": float(total_spent),
-                        "last_purchase_date": last_purchase_str
+            if password == expected_password:
+                # Get customer's basic information
+                customer_data = purchase_history[purchase_history['Customer_Id'] == customer_id]
+                total_purchases = len(customer_data)
+                total_spent = customer_data['Amount (In Dollars)'].sum()
+                
+                # Convert last purchase date to datetime if it's not already
+                last_purchase = pd.to_datetime(customer_data['Purchase_Date'].max())
+                last_purchase_str = last_purchase.strftime('%Y-%m-%d')
+                
+                return JSONResponse(
+                    status_code=status.HTTP_200_OK,
+                    content={
+                        "status": "success",
+                        "message": "Login successful",
+                        "customer_id": customer_id,
+                        "customer_stats": {
+                            "total_purchases": total_purchases,
+                            "total_spent": float(total_spent),
+                            "last_purchase_date": last_purchase_str
+                        }
                     }
-                }
-            )
+                )
+            else:
+                return JSONResponse(
+                    status_code=status.HTTP_401_UNAUTHORIZED,
+                    content={
+                        "status": "error",
+                        "message": "Invalid password"
+                    }
+                )
         else:
             return JSONResponse(
                 status_code=status.HTTP_401_UNAUTHORIZED,