Complaint Management System - Proof of Concept

A proof of concept implementation of an enterprise Complaint Management System, featuring JWT-based authentication, role-based access control, and a Dockerised full-stack architecture.

Related repositories:

• Architectural Decision Records: key design decisions documented as ADRs
• Secure Implementation: security hardened version with rate limiting, audit logging, and input sanitisation

---

Architecture

Container View

Component View

Full C4 diagrams are available in docs/c4/.
Wireframes showing the UI design can be found in docs/wireframes/.

---

Technology Stack

Layer	Technology
Backend	FastAPI (Python)
Frontend	React, Vite, Tailwind CSS
Database	PostgreSQL
Auth	JWT
Infrastructure	Docker, Docker Compose

---

Prerequisites

• Docker
• Docker Compose

Everything else (Python, Node) is built inside the containers, no local installs needed.

---

Running the System

1. Copy the example environment file and fill in your own values:

   cp .env.example .env

   Generate a JWT_SECRET_KEY with:

   openssl rand -hex 32

2. Start the stack:

   docker compose up -d

3. Access the app:

   Service	URL
   Frontend	http://localhost:3001
   Backend API	http://localhost:8001
   PostgreSQL	localhost:5433

---

Security Hardening

A security-hardened version of this PoC is available in the Secure Implementation repository, implementing fixes for identified vulnerabilities.