Why Companies in Delhi Choose Uncodemy for Web Development

from fastapi import FastAPI, HTTPException, Query
from pydantic import BaseModel, Field

app = FastAPI()

class ProductIn(BaseModel):
    name: str = Field(min_length=2, max_length=80)
    price: float = Field(gt=0)

PRODUCTS: dict[int, dict] = {}

@app.post("/products", status_code=201)
def create_product(p: ProductIn):
    pid = len(PRODUCTS) + 1
    PRODUCTS[pid] = {"id": pid, **p.model_dump()}
    return PRODUCTS[pid]

@app.get("/products")
def list_products(limit: int = Query(20, le=100), offset: int = 0):
    items = list(PRODUCTS.values())
    return {"items": items[offset:offset + limit], "total": len(items)}

@app.get("/products/{pid}")
def get_product(pid: int):
    if pid not in PRODUCTS:
        raise HTTPException(status_code=404, detail="Product not found")
    return PRODUCTS[pid]

Team API conventions (example)
URLs      : plural nouns, lowercase, hyphens (/order-items)
Methods   : GET read, POST create, PATCH update, DELETE remove
Status    : 201 created, 400 validation, 401 not logged in,
            403 forbidden, 404 not found, 409 conflict
Errors    : {"detail": "...", "code": "..."}
Lists     : ?limit=&offset= with "total" in response

from fastapi import Depends, HTTPException

def get_current_user():
    ...  # returns the logged-in user (e.g. from a session or token)

@app.get("/orders/{order_id}")
def get_order(order_id: int, user=Depends(get_current_user)):
    order = ORDERS.get(order_id)
    if order is None:
        raise HTTPException(404, "Order not found")
    # Without this check, any logged-in user could read any order
    if order["user_id"] != user["id"]:
        raise HTTPException(403, "Not allowed")
    return order

import sqlite3
conn = sqlite3.connect("shop.db")

def find_orders_unsafe(email):
    # VULNERABLE: never do this
    return conn.execute(f"SELECT * FROM orders WHERE email = '{email}'").fetchall()

def find_orders_safe(email):
    return conn.execute("SELECT * FROM orders WHERE email = ?", (email,)).fetchall()

from fastapi.testclient import TestClient
from products_api import app

client = TestClient(app)

def test_create_and_fetch_product():
    r = client.post("/products", json={"name": "Notebook", "price": 50})
    assert r.status_code == 201
    pid = r.json()["id"]
    assert client.get(f"/products/{pid}").json()["name"] == "Notebook"

def test_invalid_price_rejected():
    r = client.post("/products", json={"name": "Pen", "price": 0})
    assert r.status_code == 422

def test_missing_product_returns_404():
    assert client.get("/products/9999").status_code == 404

name: api-tests
on: [pull_request]
jobs:
  test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-python@v5
        with:
          python-version: "3.12"
      - run: pip install fastapi httpx pytest
      - run: pytest -q

Company / team:
Participants (roles, experience):
Stack (languages, frameworks, databases):
Main need: APIs / security / testing / onboarding
Sample code we can share (simplified):
Format: on-site / online / blended
Schedule constraints:
Success measures:

Before training (45-60 minutes):
1. Review a sample endpoint; list 3 problems
2. Fix an injectable query
3. Add an authorisation check
4. Write 2 API tests for an endpoint
Repeat similar tasks after training to compare.

Training results summary
Need addressed:
Assessment results (before -> after):
Changes merged into team repos:
  - conventions document
  - tests added
  - security fixes
Manager feedback after 4-6 weeks:
Next steps: