innovation-platform/README.md

# Innovation Platform

Innovation Platform is a Spring Boot based demo for university innovation and entrepreneurship project management.

## What is included

- Authentication endpoints powered by Sa-Token
- User management APIs for admin and profile workflows
- Project CRUD APIs with pagination
- Project dashboard statistics endpoint
- Static admin dashboard prototype at `backend/src/main/resources/static/index.html`
- Example SQL schema and seed data

## Demo accounts

- `admin / admin123`
- `teacher001 / admin123`
- `student001 / admin123`

## Notable API routes

- `POST /api/auth/login`
- `POST /api/auth/register`
- `POST /api/auth/logout`
- `GET /api/users`
- `GET /api/users/{id}`
- `POST /api/users`
- `PUT /api/users/{id}`
- `DELETE /api/users/{id}`
- `GET /api/users/teachers`
- `POST /api/users/change-password`
- `PUT /api/users/profile`
- `GET /api/projects`
- `GET /api/projects/stats`
- `GET /api/projects/{id}`
- `POST /api/projects`
- `PUT /api/projects/{id}`
- `DELETE /api/projects/{id}`

## Dashboard prototype

When the backend is running, open `/index.html` to use the lightweight dashboard prototype. It can:

- request a login token
- load project statistics
- query recent projects with keyword, type, level, and status filters
- query the user directory with keyword, role, and status filters
- load the active teacher roster
- view and update the current user's profile details
- change the current user's password
- visualize status and level breakdowns
- view leader and advisor names directly in project rows

## Notes

- This repository snapshot was recovered from an archive, so local build and runtime validation depend on the target machine having Java and Maven available.
- The current environment used for editing did not include a working Maven installation, so changes were verified statically only.
- The SQL bootstrap files were refreshed into a clean UTF-8 seed set and made idempotent with `ON DUPLICATE KEY UPDATE`.
- Upstream user-management changes were reconciled into this branch with DTO-based responses so password hashes are not exposed from `/api/users`.