SSMS API Gateway

Reverse proxy running on http://localhost:5000

📄 Swagger / OpenAPI

🔗 Gateway Routes

👤 IAM Service (port 5100)

GET /health — Gateway health
POST /api/auth/register → IAM
POST /api/auth/verify-email → IAM
POST /api/auth/login → IAM
POST /api/auth/refresh-token → IAM
POST /api/auth/forgot-password → IAM
POST /api/auth/reset-password → IAM
POST /api/auth/logout → IAM Bearer
PUT /api/auth/change-password → IAM Bearer
GET /api/auth/me → IAM Bearer
POST /api/two-factor/enable → IAM Bearer
POST /api/two-factor/verify → IAM Bearer
DEL /api/two-factor → IAM Bearer
GET /api/users → IAM Admin
GET /api/users/{id} → IAM Bearer
PUT /api/users/{id}/activate → IAM Admin
PUT /api/users/{id}/deactivate → IAM Admin
PUT /api/users/{id}/lock → IAM Admin
PUT /api/users/{id}/unlock → IAM Admin
POST /api/users/{userId}/roles → IAM Admin
DEL /api/users/{userId}/roles/{role} → IAM Admin
POST /api/users/{id}/teacher-classes/{classId} → IAM Bearer
DEL /api/users/{id}/teacher-classes/{classId} → IAM Bearer
POST /api/users/{id}/parent-children/{studentId} → IAM Bearer
DEL /api/users/{id}/parent-children/{studentId} → IAM Bearer
PUT /api/users/{id}/student-record/{studentRecordId} → IAM Bearer
DEL /api/users/{id}/student-record → IAM Bearer

🏫 Student Service (port 5200)

GET /api/students → Student Bearer
POST /api/students → Student Admin
GET /api/students/{id} → Student Bearer
PUT /api/students/{id} → Student Bearer
DEL /api/students/{id} → Student Admin
POST /api/students/{id}/transfer → Student Bearer
POST /api/students/{id}/withdraw → Student Bearer
POST /api/students/{id}/reactivate → Student Bearer
POST /api/students/{id}/assign-class → Student Bearer
POST /api/students/{studentId}/guardians → Student Bearer
PUT /api/students/{studentId}/guardians/{guardianId} → Student Bearer
DEL /api/students/{studentId}/guardians/{guardianId} → Student Bearer
GET /api/students/{studentId}/attendance → Student Bearer
POST /api/students/{studentId}/attendance → Student Bearer
POST /api/students/{studentId}/attendance/excuse → Student Bearer

🏢 Tenant Service (port 5300)

GET /api/schools → Tenant PlatformAdmin
POST /api/schools → Tenant PlatformAdmin
GET /api/schools/{id} → Tenant Bearer
POST /api/schools/{id}/onboard → Tenant PlatformAdmin
POST /api/schools/{id}/suspend → Tenant PlatformAdmin
POST /api/schools/{id}/activate → Tenant PlatformAdmin
GET /api/schools/{schoolId}/config → Tenant Bearer
PATCH /api/schools/{schoolId}/config → Tenant Bearer
PUT /api/schools/{schoolId}/config/features/{feature} → Tenant PlatformAdmin
GET /api/schools/{schoolId}/config/features/{feature} → Tenant Bearer