PortBlog.API.sln

@@ -1,7 +1,7 @@
 
 Microsoft Visual Studio Solution File, Format Version 12.00
-# Visual Studio Version 17
+# Visual Studio Version 18
-VisualStudioVersion = 17.9.34701.34
+VisualStudioVersion = 18.1.11304.174
 MinimumVisualStudioVersion = 10.0.40219.1
 Project("{9A19103F-16F7-4668-BE54-9A1E7A4F7556}") = "PortBlog.API", "PortBlog.API\PortBlog.API.csproj", "{2E50B5D7-56E2-4E89-8742-BB57FF4245F9}"
 EndProject
@@ -15,32 +15,90 @@ Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "KBR.Shared", "Shared\KBR.Sh
 EndProject
 Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "KBR.Shared.Lite", "Shared\KBR.Share.Lite\KBR.Shared.Lite.csproj", "{F4B7078B-C59A-46B8-881A-C3CEE2634498}"
 EndProject
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "PortBlog.Tests", "PortBlog.Tests\PortBlog.Tests.csproj", "{11106F82-FC17-497D-8747-CF1A84BFA7F8}"
+EndProject
 Global
 	GlobalSection(SolutionConfigurationPlatforms) = preSolution
 		Debug|Any CPU = Debug|Any CPU
+		Debug|x64 = Debug|x64
+		Debug|x86 = Debug|x86
 		Release|Any CPU = Release|Any CPU
+		Release|x64 = Release|x64
+		Release|x86 = Release|x86
 	EndGlobalSection
 	GlobalSection(ProjectConfigurationPlatforms) = postSolution
 		{2E50B5D7-56E2-4E89-8742-BB57FF4245F9}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
 		{2E50B5D7-56E2-4E89-8742-BB57FF4245F9}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{2E50B5D7-56E2-4E89-8742-BB57FF4245F9}.Debug|x64.ActiveCfg = Debug|Any CPU
+		{2E50B5D7-56E2-4E89-8742-BB57FF4245F9}.Debug|x64.Build.0 = Debug|Any CPU
+		{2E50B5D7-56E2-4E89-8742-BB57FF4245F9}.Debug|x86.ActiveCfg = Debug|Any CPU
+		{2E50B5D7-56E2-4E89-8742-BB57FF4245F9}.Debug|x86.Build.0 = Debug|Any CPU
 		{2E50B5D7-56E2-4E89-8742-BB57FF4245F9}.Release|Any CPU.ActiveCfg = Release|Any CPU
 		{2E50B5D7-56E2-4E89-8742-BB57FF4245F9}.Release|Any CPU.Build.0 = Release|Any CPU
+		{2E50B5D7-56E2-4E89-8742-BB57FF4245F9}.Release|x64.ActiveCfg = Release|Any CPU
+		{2E50B5D7-56E2-4E89-8742-BB57FF4245F9}.Release|x64.Build.0 = Release|Any CPU
+		{2E50B5D7-56E2-4E89-8742-BB57FF4245F9}.Release|x86.ActiveCfg = Release|Any CPU
+		{2E50B5D7-56E2-4E89-8742-BB57FF4245F9}.Release|x86.Build.0 = Release|Any CPU
 		{26654BFD-EE9B-49BA-84BA-9156AC348076}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
 		{26654BFD-EE9B-49BA-84BA-9156AC348076}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{26654BFD-EE9B-49BA-84BA-9156AC348076}.Debug|x64.ActiveCfg = Debug|Any CPU
+		{26654BFD-EE9B-49BA-84BA-9156AC348076}.Debug|x64.Build.0 = Debug|Any CPU
+		{26654BFD-EE9B-49BA-84BA-9156AC348076}.Debug|x86.ActiveCfg = Debug|Any CPU
+		{26654BFD-EE9B-49BA-84BA-9156AC348076}.Debug|x86.Build.0 = Debug|Any CPU
 		{26654BFD-EE9B-49BA-84BA-9156AC348076}.Release|Any CPU.ActiveCfg = Release|Any CPU
 		{26654BFD-EE9B-49BA-84BA-9156AC348076}.Release|Any CPU.Build.0 = Release|Any CPU
+		{26654BFD-EE9B-49BA-84BA-9156AC348076}.Release|x64.ActiveCfg = Release|Any CPU
+		{26654BFD-EE9B-49BA-84BA-9156AC348076}.Release|x64.Build.0 = Release|Any CPU
+		{26654BFD-EE9B-49BA-84BA-9156AC348076}.Release|x86.ActiveCfg = Release|Any CPU
+		{26654BFD-EE9B-49BA-84BA-9156AC348076}.Release|x86.Build.0 = Release|Any CPU
 		{DA0B3995-A83A-4D7C-A964-ADFE1F58B1FA}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
 		{DA0B3995-A83A-4D7C-A964-ADFE1F58B1FA}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{DA0B3995-A83A-4D7C-A964-ADFE1F58B1FA}.Debug|x64.ActiveCfg = Debug|Any CPU
+		{DA0B3995-A83A-4D7C-A964-ADFE1F58B1FA}.Debug|x64.Build.0 = Debug|Any CPU
+		{DA0B3995-A83A-4D7C-A964-ADFE1F58B1FA}.Debug|x86.ActiveCfg = Debug|Any CPU
+		{DA0B3995-A83A-4D7C-A964-ADFE1F58B1FA}.Debug|x86.Build.0 = Debug|Any CPU
 		{DA0B3995-A83A-4D7C-A964-ADFE1F58B1FA}.Release|Any CPU.ActiveCfg = Release|Any CPU
 		{DA0B3995-A83A-4D7C-A964-ADFE1F58B1FA}.Release|Any CPU.Build.0 = Release|Any CPU
+		{DA0B3995-A83A-4D7C-A964-ADFE1F58B1FA}.Release|x64.ActiveCfg = Release|Any CPU
+		{DA0B3995-A83A-4D7C-A964-ADFE1F58B1FA}.Release|x64.Build.0 = Release|Any CPU
+		{DA0B3995-A83A-4D7C-A964-ADFE1F58B1FA}.Release|x86.ActiveCfg = Release|Any CPU
+		{DA0B3995-A83A-4D7C-A964-ADFE1F58B1FA}.Release|x86.Build.0 = Release|Any CPU
 		{1C0F86E4-A791-4150-B9B3-B761925681DD}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
 		{1C0F86E4-A791-4150-B9B3-B761925681DD}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{1C0F86E4-A791-4150-B9B3-B761925681DD}.Debug|x64.ActiveCfg = Debug|Any CPU
+		{1C0F86E4-A791-4150-B9B3-B761925681DD}.Debug|x64.Build.0 = Debug|Any CPU
+		{1C0F86E4-A791-4150-B9B3-B761925681DD}.Debug|x86.ActiveCfg = Debug|Any CPU
+		{1C0F86E4-A791-4150-B9B3-B761925681DD}.Debug|x86.Build.0 = Debug|Any CPU
 		{1C0F86E4-A791-4150-B9B3-B761925681DD}.Release|Any CPU.ActiveCfg = Release|Any CPU
 		{1C0F86E4-A791-4150-B9B3-B761925681DD}.Release|Any CPU.Build.0 = Release|Any CPU
+		{1C0F86E4-A791-4150-B9B3-B761925681DD}.Release|x64.ActiveCfg = Release|Any CPU
+		{1C0F86E4-A791-4150-B9B3-B761925681DD}.Release|x64.Build.0 = Release|Any CPU
+		{1C0F86E4-A791-4150-B9B3-B761925681DD}.Release|x86.ActiveCfg = Release|Any CPU
+		{1C0F86E4-A791-4150-B9B3-B761925681DD}.Release|x86.Build.0 = Release|Any CPU
 		{F4B7078B-C59A-46B8-881A-C3CEE2634498}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
 		{F4B7078B-C59A-46B8-881A-C3CEE2634498}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{F4B7078B-C59A-46B8-881A-C3CEE2634498}.Debug|x64.ActiveCfg = Debug|Any CPU
+		{F4B7078B-C59A-46B8-881A-C3CEE2634498}.Debug|x64.Build.0 = Debug|Any CPU
+		{F4B7078B-C59A-46B8-881A-C3CEE2634498}.Debug|x86.ActiveCfg = Debug|Any CPU
+		{F4B7078B-C59A-46B8-881A-C3CEE2634498}.Debug|x86.Build.0 = Debug|Any CPU
 		{F4B7078B-C59A-46B8-881A-C3CEE2634498}.Release|Any CPU.ActiveCfg = Release|Any CPU
 		{F4B7078B-C59A-46B8-881A-C3CEE2634498}.Release|Any CPU.Build.0 = Release|Any CPU
+		{F4B7078B-C59A-46B8-881A-C3CEE2634498}.Release|x64.ActiveCfg = Release|Any CPU
+		{F4B7078B-C59A-46B8-881A-C3CEE2634498}.Release|x64.Build.0 = Release|Any CPU
+		{F4B7078B-C59A-46B8-881A-C3CEE2634498}.Release|x86.ActiveCfg = Release|Any CPU
+		{F4B7078B-C59A-46B8-881A-C3CEE2634498}.Release|x86.Build.0 = Release|Any CPU
+		{11106F82-FC17-497D-8747-CF1A84BFA7F8}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{11106F82-FC17-497D-8747-CF1A84BFA7F8}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{11106F82-FC17-497D-8747-CF1A84BFA7F8}.Debug|x64.ActiveCfg = Debug|Any CPU
+		{11106F82-FC17-497D-8747-CF1A84BFA7F8}.Debug|x64.Build.0 = Debug|Any CPU
+		{11106F82-FC17-497D-8747-CF1A84BFA7F8}.Debug|x86.ActiveCfg = Debug|Any CPU
+		{11106F82-FC17-497D-8747-CF1A84BFA7F8}.Debug|x86.Build.0 = Debug|Any CPU
+		{11106F82-FC17-497D-8747-CF1A84BFA7F8}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{11106F82-FC17-497D-8747-CF1A84BFA7F8}.Release|Any CPU.Build.0 = Release|Any CPU
+		{11106F82-FC17-497D-8747-CF1A84BFA7F8}.Release|x64.ActiveCfg = Release|Any CPU
+		{11106F82-FC17-497D-8747-CF1A84BFA7F8}.Release|x64.Build.0 = Release|Any CPU
+		{11106F82-FC17-497D-8747-CF1A84BFA7F8}.Release|x86.ActiveCfg = Release|Any CPU
+		{11106F82-FC17-497D-8747-CF1A84BFA7F8}.Release|x86.Build.0 = Release|Any CPU
 	EndGlobalSection
 	GlobalSection(SolutionProperties) = preSolution
 		HideSolutionNode = FALSE

PortBlog.API/Controllers/AdminController.cs

@@ -1,150 +1,420 @@
 using Asp.Versioning;
-using AutoMapper;
 using Microsoft.AspNetCore.Authorization;
 using Microsoft.AspNetCore.Mvc;
 using PortBlog.API.Models;
-using PortBlog.API.Repositories.Contracts;
+using PortBlog.API.Services.Contracts;
 
 namespace PortBlog.API.Controllers
 {
 
     /// <summary>
-    /// Controller for administrative actions related to candidates and their resumes.
+    /// Controller for administrative actions related to the logged-in candidate and their resume.
+    /// All endpoints derive the candidate identity from the access token claims.
     /// </summary>
-    [Route("api/v{version:apiVersion}/admin")]
     [ApiController]
-    [ApiVersion(1)]
+    [ApiVersion("1.0")]
+    [Route("api/v{version:apiVersion}/admin")]
     [Authorize]
-    public class AdminController(ILogger<CvController> logger, ICandidateRepository candidateRepository, IResumeRepository resumeRepository, IMapper mapper) : Controller
+    public class AdminController(ILogger<CvController> logger, IAdminService adminService) : Controller
     {
         /// <summary>
-        /// Get hobbies of the candidate by candidateid
+        /// Get hobbies of the logged-in candidate.
         /// </summary>
-        /// <param name="candidateId">The id of the candidate whose hobbies to get</param>
+        /// <returns>Hobbies and about details of the candidate</returns>
-        /// <returns>Hobbies of the candidate</returns>
         /// <response code="200">Returns the requested hobbies of the candidate</response>
-        [HttpGet("GetHobbies/{candidateId}")]
+        [HttpGet("GetHobbies")]
-        [ProducesResponseType(StatusCodes.Status404NotFound)]
+        [ProducesResponseType(StatusCodes.Status401Unauthorized)]
-        [ProducesResponseType(StatusCodes.Status400BadRequest)]
         [ProducesResponseType(StatusCodes.Status500InternalServerError)]
         [ProducesResponseType(StatusCodes.Status200OK)]
-        public async Task<ActionResult<AboutDto>> GetHobbies(int candidateId)
+        public async Task<ActionResult<AboutDto>> GetHobbies()
         {
             try
             {
-                if (!await candidateRepository.CandidateExistAsync(candidateId))
+                var candidateId = adminService.GetCandidateIdFromClaims(User);
-                {
+                var aboutDetails = await adminService.GetHobbiesAsync(candidateId);
-                    logger.LogInformation("Candidate with id {CandidateId} wasn't found when fetching about details.", candidateId);
+                return Ok(aboutDetails);
-                    return NotFound();
             }
-
+            catch (UnauthorizedAccessException ex)
-                var aboutDetails = await resumeRepository.GetHobbiesAsync(candidateId);
+            {
-
+                logger.LogInformation(ex, "Unauthorized access when fetching hobbies.");
-                return Ok(mapper.Map<AboutDto>(aboutDetails));
+                return Unauthorized(ex.Message);
-
             }
             catch (Exception ex)
             {
-                logger.LogCritical(ex, "Exception while getting about details for the candidate with id {CandidateId}.", candidateId);
+                logger.LogCritical(ex, "Exception while getting about details.");
                 return StatusCode(500, "A problem happened while handling your request.");
             }
         }
 
         /// <summary>
-        /// Get Candidate details with social links by candidateid
+        /// Get contact details (candidate with social links) for the logged-in candidate.
         /// </summary>
-        /// <param name="candidateId">The id of the candidate whose detials to get with social links</param>
         /// <returns>Candidate details with social links</returns>
         /// <response code="200">Returns the requested candidate details with social links</response>
-        [HttpGet("GetCandidateWithSocialLinks/{candidateId}")]
+        [HttpGet("GetCandidateWithSocialLinks")]
-        [ProducesResponseType(StatusCodes.Status404NotFound)]
+        [ProducesResponseType(StatusCodes.Status401Unauthorized)]
-        [ProducesResponseType(StatusCodes.Status400BadRequest)]
         [ProducesResponseType(StatusCodes.Status500InternalServerError)]
         [ProducesResponseType(StatusCodes.Status200OK)]
-        public async Task<ActionResult<CandidateSocialLinksDto>> GetContact(int candidateId)
+        public async Task<ActionResult<CandidateSocialLinksDto>> GetContact()
         {
             try
             {
-                if (!await candidateRepository.CandidateExistAsync(candidateId))
+                var candidateId = adminService.GetCandidateIdFromClaims(User);
-                {
+                var contact = await adminService.GetContactAsync(candidateId);
-                    logger.LogInformation("Candidate with id {CandidateId} wasn't found when fetching candidate with social links.", candidateId);
+                return Ok(contact);
-                    return NotFound();
             }
-
+            catch (UnauthorizedAccessException ex)
-                var contact = await resumeRepository.GetCandidateWithSocialLinksAsync(candidateId);
+            {
-
+                logger.LogInformation(ex, "Unauthorized access when fetching contact.");
-                return Ok(mapper.Map<CandidateSocialLinksDto>(contact));
+                return Unauthorized(ex.Message);
-
             }
             catch (Exception ex)
             {
-                logger.LogCritical(ex, "Exception while getting contact for the candidate with social links with id {CandidateId}.", candidateId);
+                logger.LogCritical(ex, "Exception while getting contact details.");
                 return StatusCode(500, "A problem happened while handling your request.");
             }
         }
 
         /// <summary>
-        /// Get Candidate resume by candidateid
+        /// Get resume for the logged-in candidate.
         /// </summary>
-        /// <param name="candidateId">The id of the candidate whose resume to get</param>
         /// <returns>Candidate resume</returns>
         /// <response code="200">Returns the requested candidate resume</response>
-        [HttpGet("GetResume/{candidateId}")]
+        [HttpGet("GetResume")]
-        [ProducesResponseType(StatusCodes.Status404NotFound)]
+        [ProducesResponseType(StatusCodes.Status401Unauthorized)]
-        [ProducesResponseType(StatusCodes.Status400BadRequest)]
         [ProducesResponseType(StatusCodes.Status500InternalServerError)]
         [ProducesResponseType(StatusCodes.Status200OK)]
-        public async Task<ActionResult<ResumeDto>> GetResume(int candidateId)
+        public async Task<ActionResult<ResumeDto>> GetResume()
         {
             try
             {
-                if (!await candidateRepository.CandidateExistAsync(candidateId))
+                var candidateId = adminService.GetCandidateIdFromClaims(User);
-                {
+                var resume = await adminService.GetResumeAsync(candidateId);
-                    logger.LogInformation("Candidate with id {CandidateId} wasn't found when fetching resume.", candidateId);
+                return Ok(resume);
-                    return NotFound();
             }
-
+            catch (UnauthorizedAccessException ex)
-                var resume = await resumeRepository.GetResumeAsync(candidateId);
+            {
-
+                logger.LogInformation(ex, "Unauthorized access when fetching resume.");
-                return Ok(mapper.Map<ResumeDto>(resume));
+                return Unauthorized(ex.Message);
-
             }
             catch (Exception ex)
             {
-                logger.LogCritical(ex, "Exception while getting resume for the candidate with id {CandidateId}.", candidateId);
+                logger.LogCritical(ex, "Exception while getting resume.");
                 return StatusCode(500, "A problem happened while handling your request.");
             }
         }
 
         /// <summary>
-        /// Get Candidate projects by candidateid
+        /// Get projects for the logged-in candidate.
         /// </summary>
-        /// <param name="candidateId">The id of the candidate whose projects to get</param>
         /// <returns>Candidate projects</returns>
         /// <response code="200">Returns the requested candidate projects</response>
-        [HttpGet("GetProjects/{candidateId}")]
+        [HttpGet("GetProjects")]
-        [ProducesResponseType(StatusCodes.Status404NotFound)]
+        [ProducesResponseType(StatusCodes.Status401Unauthorized)]
-        [ProducesResponseType(StatusCodes.Status400BadRequest)]
         [ProducesResponseType(StatusCodes.Status500InternalServerError)]
         [ProducesResponseType(StatusCodes.Status200OK)]
-        public async Task<ActionResult<ProjectsDto>> GetProjects(int candidateId)
+        public async Task<ActionResult<ProjectsDto>> GetProjects()
         {
             try
             {
-                if (!await candidateRepository.CandidateExistAsync(candidateId))
+                var candidateId = adminService.GetCandidateIdFromClaims(User);
-                {
+                var projects = await adminService.GetProjectsAsync(candidateId);
-                    logger.LogInformation("Candidate with id {CandidateId} wasn't found when fetching projects.", candidateId);
+                return Ok(projects);
-                    return NotFound();
             }
-
+            catch (UnauthorizedAccessException ex)
-                var projects = await resumeRepository.GetProjectsAsync(candidateId);
+            {
-
+                logger.LogInformation(ex, "Unauthorized access when fetching projects.");
-                return Ok(mapper.Map<ProjectsDto>(projects));
+                return Unauthorized(ex.Message);
-
             }
             catch (Exception ex)
             {
-                logger.LogCritical(ex, "Exception while getting projects for the candidate with id {CandidateId}.", candidateId);
+                logger.LogCritical(ex, "Exception while getting projects.");
+                return StatusCode(500, "A problem happened while handling your request.");
+            }
+        }
+
+        /// <summary>
+        /// Create or update a project for the logged-in candidate's resume.
+        /// </summary>
+        [HttpPost("UpsertProject")]
+        [ProducesResponseType(StatusCodes.Status400BadRequest)]
+        [ProducesResponseType(StatusCodes.Status401Unauthorized)]
+        [ProducesResponseType(StatusCodes.Status500InternalServerError)]
+        [ProducesResponseType(StatusCodes.Status200OK)]
+        public async Task<ActionResult<ProjectDto>> UpsertProject([FromBody] ProjectDto projectDto)
+        {
+            try
+            {
+                if (!ModelState.IsValid)
+                {
+                    return BadRequest(ModelState);
+                }
+
+                var candidateId = adminService.GetCandidateIdFromClaims(User);
+                var result = await adminService.UpsertProjectAsync(candidateId, projectDto);
+                return Ok(result);
+            }
+            catch (UnauthorizedAccessException ex)
+            {
+                logger.LogInformation(ex, "Unauthorized access when upserting project.");
+                return Unauthorized(ex.Message);
+            }
+            catch (Exception ex)
+            {
+                logger.LogCritical(ex, "Exception while upserting project.");
+                return StatusCode(500, "A problem happened while handling your request.");
+            }
+        }
+
+        /// <summary>
+        /// Delete a project from the logged-in candidate's resume.
+        /// </summary>
+        /// <param name="projectId">The id of the project to delete</param>
+        [HttpDelete("DeleteProject/{projectId}")]
+        [ProducesResponseType(StatusCodes.Status401Unauthorized)]
+        [ProducesResponseType(StatusCodes.Status404NotFound)]
+        [ProducesResponseType(StatusCodes.Status500InternalServerError)]
+        [ProducesResponseType(StatusCodes.Status200OK)]
+        public async Task<ActionResult> DeleteProject(int projectId)
+        {
+            try
+            {
+                var candidateId = adminService.GetCandidateIdFromClaims(User);
+                var deleted = await adminService.DeleteProjectAsync(candidateId, projectId);
+                if (!deleted)
+                {
+                    return NotFound();
+                }
+                return Ok();
+            }
+            catch (UnauthorizedAccessException ex)
+            {
+                logger.LogInformation(ex, "Unauthorized access when deleting project.");
+                return Unauthorized(ex.Message);
+            }
+            catch (KeyNotFoundException ex)
+            {
+                logger.LogInformation(ex, "Resume not found when deleting project.");
+                return NotFound();
+            }
+            catch (Exception ex)
+            {
+                logger.LogCritical(ex, "Exception while deleting project {ProjectId}.", projectId);
+                return StatusCode(500, "A problem happened while handling your request.");
+            }
+        }
+
+        /// <summary>
+        /// Create, update, or remove hobbies and update the about section for the logged-in candidate.
+        /// Hobbies present in the list are added or updated; hobbies not in the list are removed.
+        /// </summary>
+        [HttpPost("UpsertHobbies")]
+        [ProducesResponseType(StatusCodes.Status400BadRequest)]
+        [ProducesResponseType(StatusCodes.Status401Unauthorized)]
+        [ProducesResponseType(StatusCodes.Status404NotFound)]
+        [ProducesResponseType(StatusCodes.Status500InternalServerError)]
+        [ProducesResponseType(StatusCodes.Status200OK)]
+        public async Task<ActionResult<AboutDto>> UpsertHobbies([FromBody] AboutDto aboutDto)
+        {
+            try
+            {
+                if (!ModelState.IsValid)
+                {
+                    return BadRequest(ModelState);
+                }
+
+                var candidateId = adminService.GetCandidateIdFromClaims(User);
+                var result = await adminService.UpsertHobbiesAsync(candidateId, aboutDto);
+                return Ok(result);
+            }
+            catch (UnauthorizedAccessException ex)
+            {
+                logger.LogInformation(ex, "Unauthorized access when upserting hobbies.");
+                return Unauthorized(ex.Message);
+            }
+            catch (KeyNotFoundException ex)
+            {
+                logger.LogInformation(ex, "Resume not found when upserting hobbies.");
+                return NotFound();
+            }
+            catch (Exception ex)
+            {
+                logger.LogCritical(ex, "Exception while upserting hobbies.");
+                return StatusCode(500, "A problem happened while handling your request.");
+            }
+        }
+
+        /// <summary>
+        /// Create, update, or remove skills for the logged-in candidate's resume.
+        /// Skills present in the list are added or updated; skills not in the list are removed.
+        /// </summary>
+        [HttpPost("UpsertSkills")]
+        [ProducesResponseType(StatusCodes.Status400BadRequest)]
+        [ProducesResponseType(StatusCodes.Status401Unauthorized)]
+        [ProducesResponseType(StatusCodes.Status500InternalServerError)]
+        [ProducesResponseType(StatusCodes.Status200OK)]
+        public async Task<ActionResult<IEnumerable<SkillDto>>> UpsertSkills([FromBody] IEnumerable<SkillDto> skillDtos)
+        {
+            try
+            {
+                if (!ModelState.IsValid)
+                {
+                    return BadRequest(ModelState);
+                }
+
+                var candidateId = adminService.GetCandidateIdFromClaims(User);
+                var result = await adminService.UpsertSkillsAsync(candidateId, skillDtos);
+                return Ok(result);
+            }
+            catch (UnauthorizedAccessException ex)
+            {
+                logger.LogInformation(ex, "Unauthorized access when upserting skills.");
+                return Unauthorized(ex.Message);
+            }
+            catch (Exception ex)
+            {
+                logger.LogCritical(ex, "Exception while upserting skills.");
+                return StatusCode(500, "A problem happened while handling your request.");
+            }
+        }
+
+        /// <summary>
+        /// Create, update, or remove academics for the logged-in candidate's resume.
+        /// Academics present in the list are added or updated; academics not in the list are removed.
+        /// </summary>
+        [HttpPost("UpsertAcademics")]
+        [ProducesResponseType(StatusCodes.Status400BadRequest)]
+        [ProducesResponseType(StatusCodes.Status401Unauthorized)]
+        [ProducesResponseType(StatusCodes.Status500InternalServerError)]
+        [ProducesResponseType(StatusCodes.Status200OK)]
+        public async Task<ActionResult<IEnumerable<AcademicDto>>> UpsertAcademics([FromBody] IEnumerable<AcademicDto> academicDtos)
+        {
+            try
+            {
+                if (!ModelState.IsValid)
+                {
+                    return BadRequest(ModelState);
+                }
+
+                var candidateId = adminService.GetCandidateIdFromClaims(User);
+                var result = await adminService.UpsertAcademicsAsync(candidateId, academicDtos);
+                return Ok(result);
+            }
+            catch (UnauthorizedAccessException ex)
+            {
+                logger.LogInformation(ex, "Unauthorized access when upserting academics.");
+                return Unauthorized(ex.Message);
+            }
+            catch (Exception ex)
+            {
+                logger.LogCritical(ex, "Exception while upserting academics.");
+                return StatusCode(500, "A problem happened while handling your request.");
+            }
+        }
+
+        /// <summary>
+        /// Create, update, or remove experiences for the logged-in candidate's resume.
+        /// Experiences present in the list are added or updated; experiences not in the list are removed.
+        /// </summary>
+        [HttpPost("UpsertExperiences")]
+        [ProducesResponseType(StatusCodes.Status400BadRequest)]
+        [ProducesResponseType(StatusCodes.Status401Unauthorized)]
+        [ProducesResponseType(StatusCodes.Status500InternalServerError)]
+        [ProducesResponseType(StatusCodes.Status200OK)]
+        public async Task<ActionResult<IEnumerable<ExperienceDto>>> UpsertExperiences([FromBody] IEnumerable<ExperienceDto> experienceDtos)
+        {
+            try
+            {
+                if (!ModelState.IsValid)
+                {
+                    return BadRequest(ModelState);
+                }
+
+                var candidateId = adminService.GetCandidateIdFromClaims(User);
+                var result = await adminService.UpsertExperiencesAsync(candidateId, experienceDtos);
+                return Ok(result);
+            }
+            catch (UnauthorizedAccessException ex)
+            {
+                logger.LogInformation(ex, "Unauthorized access when upserting experiences.");
+                return Unauthorized(ex.Message);
+            }
+            catch (Exception ex)
+            {
+                logger.LogCritical(ex, "Exception while upserting experiences.");
+                return StatusCode(500, "A problem happened while handling your request.");
+            }
+        }
+
+        /// <summary>
+        /// Create, update, or remove certifications for the logged-in candidate's resume.
+        /// Certifications present in the list are added or updated; certifications not in the list are removed.
+        /// </summary>
+        [HttpPost("UpsertCertifications")]
+        [ProducesResponseType(StatusCodes.Status400BadRequest)]
+        [ProducesResponseType(StatusCodes.Status401Unauthorized)]
+        [ProducesResponseType(StatusCodes.Status500InternalServerError)]
+        [ProducesResponseType(StatusCodes.Status200OK)]
+        public async Task<ActionResult<IEnumerable<CertificationDto>>> UpsertCertifications([FromBody] IEnumerable<CertificationDto> certificationDtos)
+        {
+            try
+            {
+                if (!ModelState.IsValid)
+                {
+                    return BadRequest(ModelState);
+                }
+
+                var candidateId = adminService.GetCandidateIdFromClaims(User);
+                var result = await adminService.UpsertCertificationsAsync(candidateId, certificationDtos);
+                return Ok(result);
+            }
+            catch (UnauthorizedAccessException ex)
+            {
+                logger.LogInformation(ex, "Unauthorized access when upserting certifications.");
+                return Unauthorized(ex.Message);
+            }
+            catch (Exception ex)
+            {
+                logger.LogCritical(ex, "Exception while upserting certifications.");
+                return StatusCode(500, "A problem happened while handling your request.");
+            }
+        }
+
+        /// <summary>
+        /// Create or update contact information (candidate with social links) for the logged-in candidate.
+        /// </summary>
+        [HttpPost("UpsertContact")]
+        [ProducesResponseType(StatusCodes.Status400BadRequest)]
+        [ProducesResponseType(StatusCodes.Status401Unauthorized)]
+        [ProducesResponseType(StatusCodes.Status404NotFound)]
+        [ProducesResponseType(StatusCodes.Status500InternalServerError)]
+        [ProducesResponseType(StatusCodes.Status200OK)]
+        public async Task<ActionResult<CandidateSocialLinksDto>> UpsertContact([FromBody] CandidateSocialLinksDto contactDto)
+        {
+            try
+            {
+                if (!ModelState.IsValid)
+                {
+                    return BadRequest(ModelState);
+                }
+
+                var candidateId = adminService.GetCandidateIdFromClaims(User);
+                var result = await adminService.UpsertContactAsync(candidateId, contactDto);
+                return Ok(result);
+            }
+            catch (UnauthorizedAccessException ex)
+            {
+                logger.LogInformation(ex, "Unauthorized access when upserting contact.");
+                return Unauthorized(ex.Message);
+            }
+            catch (KeyNotFoundException ex)
+            {
+                logger.LogInformation(ex, "Resume not found when upserting contact.");
+                return NotFound();
+            }
+            catch (Exception ex)
+            {
+                logger.LogCritical(ex, "Exception while upserting contact.");
                 return StatusCode(500, "A problem happened while handling your request.");
             }
         }

PortBlog.API/Controllers/AuthController.cs

@@ -12,9 +12,9 @@ namespace PortBlog.API.Controllers
     /// <summary>  
     /// Controller for handling authentication-related operations.  
     /// </summary>  
-    [Route("api/v{version:apiVersion}/auth")]
     [ApiController]
-    [ApiVersion(1)]
+    [ApiVersion("1.0")]
+    [Route("api/v{version:apiVersion}/auth")]
     public class AuthController(IAuthService authService, IMailService mailService, ICandidateRepository candidateRepository, ILogger<AuthController> logger, IMapper mapper, IConfiguration configuration, ITemplateService templateService, IAppDistributedCache cache) : ControllerBase
     {
         /// <summary>  

PortBlog.API/Controllers/BlogController.cs

@@ -10,7 +10,7 @@ namespace PortBlog.API.Controllers
 {
     [Route("blog/api/v{version:apiVersion}/posts")]
     [ApiController]
-    [ApiVersion(1)]
+    [ApiVersion("1.0")]
     public class BlogController : ControllerBase
     {
         private readonly ILogger<BlogController> _logger;

PortBlog.API/Controllers/CvController.cs

@@ -7,9 +7,9 @@ using PortBlog.API.Services.Contracts;
 
 namespace PortBlog.API.Controllers
 {
-    [Route("api/v{versions:apiVersion}/cv")]
     [ApiController]
-    [ApiVersion(1)]
+    [ApiVersion("1.0")]
+    [Route("api/v{version:apiVersion}/cv")]
     public class CvController : ControllerBase
     {
         private readonly ILogger<CvController> _logger;
@@ -37,7 +37,7 @@ namespace PortBlog.API.Controllers
         /// <response code="200">Returns the requested cv of the candidate</response>
         [HttpGet("{candidateId}")]
         [Obsolete]
-        [ApiVersion(0.1, Deprecated = true)]
+        [ApiVersion("0.1", Deprecated = true)]
         [ProducesResponseType(StatusCodes.Status404NotFound)]
         [ProducesResponseType(StatusCodes.Status400BadRequest)]
         [ProducesResponseType(StatusCodes.Status500InternalServerError)]

PortBlog.API/Controllers/PostController.cs

@@ -1,9 +1,11 @@
-using Microsoft.AspNetCore.Mvc;
+using Asp.Versioning;
+using Microsoft.AspNetCore.Mvc;
 
 namespace PortBlog.API.Controllers
 {
-    [Route("api/blog/post")]
+    [ApiVersionNeutral]
     [ApiController]
+    [Route("api/v{version:apiVersion}/blog/post")]
     public class PostController : ControllerBase
     {
         private readonly ILogger<PostController> _logger;

PortBlog.API/Extensions/ConfigureSwaggerOptions.cs

@@ -0,0 +1,28 @@
+using Asp.Versioning.ApiExplorer;
+using Microsoft.Extensions.Options;
+using Microsoft.OpenApi.Models;
+using Swashbuckle.AspNetCore.SwaggerGen;
+
+public class ConfigureSwaggerOptions : IConfigureOptions<SwaggerGenOptions>
+{
+    private readonly IApiVersionDescriptionProvider _provider;
+
+    public ConfigureSwaggerOptions(IApiVersionDescriptionProvider provider)
+    {
+        _provider = provider;
+    }
+
+    public void Configure(SwaggerGenOptions options)
+    {
+        foreach (var description in _provider.ApiVersionDescriptions)
+        {
+            options.SwaggerDoc(
+                description.GroupName,
+                new OpenApiInfo
+                {
+                    Title = "PortBlog API",
+                    Version = description.GroupName
+                });
+        }
+    }
+}

PortBlog.API/Extensions/ServiceExtensions.cs

@@ -21,6 +21,7 @@ namespace PortBlog.API.Extensions
             services.AddTransient<IMailService, MailService>();
             services.AddTransient<IAuthService, AuthService>();
             services.AddTransient<ITemplateService, TemplateService>();
+            services.AddScoped<IAdminService, AdminService>();
             return services;
         }
     }

PortBlog.API/Models/AcademicDto.cs

@@ -2,7 +2,7 @@
 {
     public class AcademicDto
     {
-        public int AcademicId { get; set; }
+        public int? AcademicId { get; set; }
 
         public string Institution { get; set; } = string.Empty;
 

PortBlog.API/Models/CertificationDto.cs

@@ -2,7 +2,7 @@
 {
     public class CertificationDto
     {
-        public int CertificationId { get; set; }
+        public int? CertificationId { get; set; }
 
         public string CertificationName { get; set; } = string.Empty;
 

PortBlog.API/Models/ExperienceDetailsDto.cs

@@ -2,7 +2,7 @@
 {
     public class ExperienceDetailsDto
     {
-        public int Id { get; set; }
+        public int? Id { get; set; }
 
         public string Details { get; set; } = string.Empty;
 

PortBlog.API/Models/ExperienceDto.cs

@@ -4,7 +4,7 @@ namespace PortBlog.API.Models
 {
     public class ExperienceDto
     {
-        public int ExperienceId { get; set; }
+        public int? ExperienceId { get; set; }
 
         public string Title { get; set; } = string.Empty;
 
@@ -12,10 +12,31 @@ namespace PortBlog.API.Models
 
         public string Company { get; set; } = string.Empty;
 
+        public string? Location { get; set; }
+
+        /// <summary>
+        /// Full start date for write operations (e.g. "2020-01-01").
+        /// </summary>
+        public DateTime? StartDate { get; set; }
+
+        /// <summary>
+        /// Full end date for write operations. Null means "Present".
+        /// </summary>
+        public DateTime? EndDate { get; set; }
+
+        /// <summary>
+        /// Read-only display value: start year (e.g. "2020"). Mapped from entity on read.
+        /// </summary>
         public string StartYear { get; set; } = string.Empty;
 
+        /// <summary>
+        /// Read-only display value: end year (e.g. "2023" or "Present"). Mapped from entity on read.
+        /// </summary>
         public string EndYear { get; set; } = string.Empty;
 
+        /// <summary>
+        /// Read-only display value: formatted period (e.g. "Jan 2020 - Mar 2023"). Mapped from entity on read.
+        /// </summary>
         public string Period { get; set; } = string.Empty;
 
         public ICollection<ExperienceDetailsDto> Details { get; set; } = new List<ExperienceDetailsDto>();

PortBlog.API/Models/HobbyDto.cs

@@ -2,7 +2,7 @@
 {
     public class HobbyDto
     {
-        public int HobbyId { get; set; }
+        public int? HobbyId { get; set; }
 
         public string Name { get; set; } = string.Empty;
 

PortBlog.API/Models/ProjectDto.cs

@@ -4,7 +4,7 @@ namespace PortBlog.API.Models
 {
     public class ProjectDto
     {
-        public int ProjectId { get; set; }
+        public int? ProjectId { get; set; }
 
         public string Name { get; set; } = string.Empty;
 

PortBlog.API/Models/SkillDto.cs

@@ -2,7 +2,7 @@
 {
     public class SkillDto
     {
-        public int SkillId { get; set; }
+        public int? SkillId { get; set; }
 
         public string Name { get; set; } = string.Empty;
 

PortBlog.API/PortBlog.API.csproj

@@ -9,6 +9,7 @@
   </PropertyGroup>
 
   <ItemGroup>
+    <PackageReference Include="Asp.Versioning.Mvc" Version="8.1.1" />
     <PackageReference Include="Asp.Versioning.Mvc.ApiExplorer" Version="8.1.0" />
     <PackageReference Include="AutoMapper" Version="15.0.1" />
     <PackageReference Include="BCrypt.Net-Next" Version="4.0.3" />

PortBlog.API/PortBlog.API.xml

@@ -6,46 +6,90 @@
     <members>
         <member name="T:PortBlog.API.Controllers.AdminController">
             <summary>
-            Controller for administrative actions related to candidates and their resumes.
+            Controller for administrative actions related to the logged-in candidate and their resume.
+            All endpoints derive the candidate identity from the access token claims.
             </summary>
         </member>
-        <member name="M:PortBlog.API.Controllers.AdminController.#ctor(Microsoft.Extensions.Logging.ILogger{PortBlog.API.Controllers.CvController},PortBlog.API.Repositories.Contracts.ICandidateRepository,PortBlog.API.Repositories.Contracts.IResumeRepository,AutoMapper.IMapper)">
+        <member name="M:PortBlog.API.Controllers.AdminController.#ctor(Microsoft.Extensions.Logging.ILogger{PortBlog.API.Controllers.CvController},PortBlog.API.Services.Contracts.IAdminService)">
             <summary>
-            Controller for administrative actions related to candidates and their resumes.
+            Controller for administrative actions related to the logged-in candidate and their resume.
+            All endpoints derive the candidate identity from the access token claims.
             </summary>
         </member>
-        <member name="M:PortBlog.API.Controllers.AdminController.GetHobbies(System.Int32)">
+        <member name="M:PortBlog.API.Controllers.AdminController.GetHobbies">
             <summary>
-            Get hobbies of the candidate by candidateid
+            Get hobbies of the logged-in candidate.
             </summary>
-            <param name="candidateId">The id of the candidate whose hobbies to get</param>
+            <returns>Hobbies and about details of the candidate</returns>
-            <returns>Hobbies of the candidate</returns>
             <response code="200">Returns the requested hobbies of the candidate</response>
         </member>
-        <member name="M:PortBlog.API.Controllers.AdminController.GetContact(System.Int32)">
+        <member name="M:PortBlog.API.Controllers.AdminController.GetContact">
             <summary>
-            Get Candidate details with social links by candidateid
+            Get contact details (candidate with social links) for the logged-in candidate.
             </summary>
-            <param name="candidateId">The id of the candidate whose detials to get with social links</param>
             <returns>Candidate details with social links</returns>
             <response code="200">Returns the requested candidate details with social links</response>
         </member>
-        <member name="M:PortBlog.API.Controllers.AdminController.GetResume(System.Int32)">
+        <member name="M:PortBlog.API.Controllers.AdminController.GetResume">
             <summary>
-            Get Candidate resume by candidateid
+            Get resume for the logged-in candidate.
             </summary>
-            <param name="candidateId">The id of the candidate whose resume to get</param>
             <returns>Candidate resume</returns>
             <response code="200">Returns the requested candidate resume</response>
         </member>
-        <member name="M:PortBlog.API.Controllers.AdminController.GetProjects(System.Int32)">
+        <member name="M:PortBlog.API.Controllers.AdminController.GetProjects">
             <summary>
-            Get Candidate projects by candidateid
+            Get projects for the logged-in candidate.
             </summary>
-            <param name="candidateId">The id of the candidate whose projects to get</param>
             <returns>Candidate projects</returns>
             <response code="200">Returns the requested candidate projects</response>
         </member>
+        <member name="M:PortBlog.API.Controllers.AdminController.UpsertProject(PortBlog.API.Models.ProjectDto)">
+            <summary>
+            Create or update a project for the logged-in candidate's resume.
+            </summary>
+        </member>
+        <member name="M:PortBlog.API.Controllers.AdminController.DeleteProject(System.Int32)">
+            <summary>
+            Delete a project from the logged-in candidate's resume.
+            </summary>
+            <param name="projectId">The id of the project to delete</param>
+        </member>
+        <member name="M:PortBlog.API.Controllers.AdminController.UpsertHobbies(PortBlog.API.Models.AboutDto)">
+            <summary>
+            Create, update, or remove hobbies and update the about section for the logged-in candidate.
+            Hobbies present in the list are added or updated; hobbies not in the list are removed.
+            </summary>
+        </member>
+        <member name="M:PortBlog.API.Controllers.AdminController.UpsertSkills(System.Collections.Generic.IEnumerable{PortBlog.API.Models.SkillDto})">
+            <summary>
+            Create, update, or remove skills for the logged-in candidate's resume.
+            Skills present in the list are added or updated; skills not in the list are removed.
+            </summary>
+        </member>
+        <member name="M:PortBlog.API.Controllers.AdminController.UpsertAcademics(System.Collections.Generic.IEnumerable{PortBlog.API.Models.AcademicDto})">
+            <summary>
+            Create, update, or remove academics for the logged-in candidate's resume.
+            Academics present in the list are added or updated; academics not in the list are removed.
+            </summary>
+        </member>
+        <member name="M:PortBlog.API.Controllers.AdminController.UpsertExperiences(System.Collections.Generic.IEnumerable{PortBlog.API.Models.ExperienceDto})">
+            <summary>
+            Create, update, or remove experiences for the logged-in candidate's resume.
+            Experiences present in the list are added or updated; experiences not in the list are removed.
+            </summary>
+        </member>
+        <member name="M:PortBlog.API.Controllers.AdminController.UpsertCertifications(System.Collections.Generic.IEnumerable{PortBlog.API.Models.CertificationDto})">
+            <summary>
+            Create, update, or remove certifications for the logged-in candidate's resume.
+            Certifications present in the list are added or updated; certifications not in the list are removed.
+            </summary>
+        </member>
+        <member name="M:PortBlog.API.Controllers.AdminController.UpsertContact(PortBlog.API.Models.CandidateSocialLinksDto)">
+            <summary>
+            Create or update contact information (candidate with social links) for the logged-in candidate.
+            </summary>
+        </member>
         <member name="T:PortBlog.API.Controllers.AuthController">
             <summary>  
             Controller for handling authentication-related operations.  
@@ -401,6 +445,31 @@
             The project categories of all the projects
             </summary>
         </member>
+        <member name="P:PortBlog.API.Models.ExperienceDto.StartDate">
+            <summary>
+            Full start date for write operations (e.g. "2020-01-01").
+            </summary>
+        </member>
+        <member name="P:PortBlog.API.Models.ExperienceDto.EndDate">
+            <summary>
+            Full end date for write operations. Null means "Present".
+            </summary>
+        </member>
+        <member name="P:PortBlog.API.Models.ExperienceDto.StartYear">
+            <summary>
+            Read-only display value: start year (e.g. "2020"). Mapped from entity on read.
+            </summary>
+        </member>
+        <member name="P:PortBlog.API.Models.ExperienceDto.EndYear">
+            <summary>
+            Read-only display value: end year (e.g. "2023" or "Present"). Mapped from entity on read.
+            </summary>
+        </member>
+        <member name="P:PortBlog.API.Models.ExperienceDto.Period">
+            <summary>
+            Read-only display value: formatted period (e.g. "Jan 2020 - Mar 2023"). Mapped from entity on read.
+            </summary>
+        </member>
         <member name="T:PortBlog.API.Models.ResumeDto">
             <summary>
             CV details of the candidate
@@ -421,6 +490,29 @@
             The work experiences of the candidate
             </summary>
         </member>
+        <member name="T:PortBlog.API.Repositories.ResumeRepository">
+            <summary>
+            Repository for managing resume-related data access and operations.
+            </summary>
+        </member>
+        <member name="M:PortBlog.API.Repositories.ResumeRepository.GetLatestResumeForCandidateAsync(System.Int32,System.Boolean)">
+            <summary>
+            Retrieves the latest resume for a candidate, optionally including related data.
+            </summary>
+            <param name="candidateId">The ID of the candidate.</param>
+            <param name="includeOtherData">If true, includes related data such as academics, experiences, social links, etc.</param>
+            <returns>The latest <see cref="T:PortBlog.API.Entities.Resume"/> for the candidate, or null if not found.</returns>
+        </member>
+        <member name="T:PortBlog.API.Services.AdminService">
+            <summary>
+            Service for administrative operations related to candidates, resumes, and their associated data.
+            </summary>
+        </member>
+        <member name="M:PortBlog.API.Services.AdminService.#ctor(PortBlog.API.Repositories.Contracts.ICandidateRepository,PortBlog.API.Repositories.Contracts.IResumeRepository,AutoMapper.IMapper)">
+            <summary>
+            Service for administrative operations related to candidates, resumes, and their associated data.
+            </summary>
+        </member>
         <member name="T:PortBlog.API.Services.AuthService">
             <summary>
             Provides authentication services such as OTP generation, validation, and JWT token management.
@@ -493,6 +585,11 @@
             <param name="refreshToken">The refresh token to revoke.</param>
             <returns>A task that represents the asynchronous revoke operation.</returns>
         </member>
+        <member name="T:PortBlog.API.Services.Contracts.IAdminService">
+            <summary>
+            Service for administrative operations related to candidates, resumes, and their associated data.
+            </summary>
+        </member>
         <member name="T:PortBlog.API.Services.Contracts.IAuthService">
             <summary>
             Provides authentication-related services such as OTP generation, token management, and refresh token handling.

PortBlog.API/Profiles/ResumeProfile.cs

@@ -35,6 +35,16 @@ namespace PortBlog.API.Profiles
                 (
                     dest => dest.EndYear,
                     opts => opts.MapFrom(src => src.EndDate != null ? src.EndDate.Value.Year.ToString() : "Present")
+                )
+                .ForMember
+                (
+                    dest => dest.StartDate,
+                    opts => opts.MapFrom(src => src.StartDate)
+                )
+                .ForMember
+                (
+                    dest => dest.EndDate,
+                    opts => opts.MapFrom(src => src.EndDate)
                 );
             CreateMap<ExperienceDetails, ExperienceDetailsDto>();
             CreateMap<Project, ProjectDto>()

PortBlog.API/Program.cs

@@ -99,16 +99,18 @@ builder.Services.AddAutoMapper(cfg => cfg.AddMaps(AppDomain.CurrentDomain.GetAss
 builder.Services.AddCache(builder.Configuration);
 
 
-// Registering API Versioning Specification services
+builder.Services
-builder.Services.AddApiVersioning(setupAction =>
+    .AddApiVersioning(options =>
     {
-    setupAction.ReportApiVersions = true;
+        options.DefaultApiVersion = new ApiVersion(1, 0);
-    setupAction.AssumeDefaultVersionWhenUnspecified = true;
+        options.AssumeDefaultVersionWhenUnspecified = true;
-    setupAction.DefaultApiVersion = new ApiVersion(1, 0);
+        options.ReportApiVersions = true;
-}).AddMvc()
+    })
-.AddApiExplorer(setupAction =>
+    .AddMvc()   // IMPORTANT
+    .AddApiExplorer(options =>
     {
-    setupAction.SubstituteApiVersionInUrl = true;
+        options.GroupNameFormat = "'v'V";
+        options.SubstituteApiVersionInUrl = true;
     });
 
 builder.Services.AddSwaggerGen(c =>
@@ -168,6 +170,8 @@ builder.Services.AddSwaggerGen(c =>
     c.AddSecurityRequirement(requirement);
 });
 
+builder.Services.ConfigureOptions<ConfigureSwaggerOptions>();
+
 var jwtKey = builder.Configuration["Jwt:Key"];
 if (string.IsNullOrEmpty(jwtKey))
 {
@@ -196,8 +200,6 @@ builder.Services.AddAuthentication(options =>
 
 var app = builder.Build();
 
-app.UseCors();
-
 if (!app.Environment.IsDevelopment())
 {
     app.UseExceptionHandler();
@@ -211,6 +213,12 @@ if (app.Environment.IsDevelopment())
     {
         // Get the IApiVersionDescriptionProvider from the app's service provider
         var apiVersionDescriptionProvider = app.Services.GetRequiredService<IApiVersionDescriptionProvider>();
+
+        foreach (var d in apiVersionDescriptionProvider.ApiVersionDescriptions)
+        {
+            Console.WriteLine($"GroupName: {d.GroupName}");
+        }
+
         foreach (var description in apiVersionDescriptionProvider.ApiVersionDescriptions)
         {
             setupAction.SwaggerEndpoint(
@@ -229,12 +237,16 @@ app.UseStaticFiles(new StaticFileOptions()
     RequestPath = new PathString("/images")
 });
 
+app.UseRouting();
+
+app.UseCors();
+
+app.UseMiddleware<ApiKeyMiddleware>();
+
 app.UseAuthentication();
 
 app.UseAuthorization();
 
-app.UseMiddleware<ApiKeyMiddleware>();
-
 app.MapControllers();
 
 app.Run();

PortBlog.API/Repositories/Contracts/IResumeRepository.cs

@@ -15,5 +15,72 @@ namespace PortBlog.API.Repositories.Contracts
         Task<Resume?> GetProjectsAsync(int candidateId);
 
         Task<Blog?> GetBlogAsync(int candidate);
+
+        // Added for admin write operations used by controllers
+        Task<Resume?> GetByIdAsync(int resumeId);
+
+        Task<Resume?> GetByIdWithCollectionsAsync(int resumeId);
+
+        Task<Project?> GetProjectAsync(int projectId);
+
+        Task<Hobby?> GetHobbyAsync(int hobbyId);
+
+        Task<IEnumerable<Hobby>> GetHobbiesByResumeIdAsync(int resumeId);
+
+        Task<Candidate?> GetCandidateByIdAsync(int candidateId);
+
+        void AddProject(Project project);
+
+        void UpdateProject(Project project);
+
+        void RemoveProject(Project project);
+
+        void AddHobby(Hobby hobby);
+
+        void UpdateHobby(Hobby hobby);
+
+        void RemoveHobby(Hobby hobby);
+
+        void AddSkill(Skill skill);
+
+        void UpdateSkill(Skill skill);
+
+        void RemoveSkill(Skill skill);
+
+        void AddAcademic(Academic academic);
+
+        void UpdateAcademic(Academic academic);
+
+        void RemoveAcademic(Academic academic);
+
+        void AddExperience(Experience experience);
+
+        void UpdateExperience(Experience experience);
+
+        void RemoveExperience(Experience experience);
+
+        void AddExperienceDetails(ExperienceDetails details);
+
+        void UpdateExperienceDetails(ExperienceDetails details);
+
+        void RemoveExperienceDetails(ExperienceDetails details);
+
+        void AddCertification(Certification certification);
+
+        void UpdateCertification(Certification certification);
+
+        void RemoveCertification(Certification certification);
+
+        void AddResume(Resume resume);
+
+        void UpdateResume(Resume resume);
+
+        void UpdateCandidate(Candidate candidate);
+
+        void AddSocialLink(SocialLinks socialLink);
+
+        void UpdateSocialLink(SocialLinks socialLink);
+
+        Task<bool> SaveChangesAsync();
     }
 }

PortBlog.API/Repositories/ResumeRepository.cs

@@ -1,11 +1,13 @@
 using Microsoft.EntityFrameworkCore;
 using PortBlog.API.DbContexts;
 using PortBlog.API.Entities;
-using PortBlog.API.Models;
 using PortBlog.API.Repositories.Contracts;
 
 namespace PortBlog.API.Repositories
 {
+    /// <summary>
+    /// Repository for managing resume-related data access and operations.
+    /// </summary>
     public class ResumeRepository : IResumeRepository
     {
         private readonly CvBlogContext _cvBlogContext;
@@ -14,6 +16,13 @@ namespace PortBlog.API.Repositories
         {
             _cvBlogContext = cvBlogContext;
         }
+
+        /// <summary>
+        /// Retrieves the latest resume for a candidate, optionally including related data.
+        /// </summary>
+        /// <param name="candidateId">The ID of the candidate.</param>
+        /// <param name="includeOtherData">If true, includes related data such as academics, experiences, social links, etc.</param>
+        /// <returns>The latest <see cref="Resume"/> for the candidate, or null if not found.</returns>
         public async Task<Resume?> GetLatestResumeForCandidateAsync(int candidateId, bool includeOtherData)
         {
             if (includeOtherData)
@@ -83,5 +92,180 @@ namespace PortBlog.API.Repositories
 
             return result?.SocialLinks?.Blog;
         }
+
+        // New read helpers
+        public async Task<Resume?> GetByIdAsync(int resumeId)
+        {
+            return await _cvBlogContext.Resumes.FirstOrDefaultAsync(r => r.ResumeId == resumeId);
+        }
+
+        public async Task<Resume?> GetByIdWithCollectionsAsync(int resumeId)
+        {
+            return await _cvBlogContext.Resumes
+                .Include(r => r.Skills)
+                .Include(r => r.Academics)
+                .Include(r => r.Experiences)
+                .ThenInclude(e => e.Details)
+                .Include(r => r.Certifications)
+                .Include(r => r.Projects)
+                .FirstOrDefaultAsync(r => r.ResumeId == resumeId);
+        }
+
+        public async Task<Project?> GetProjectAsync(int projectId)
+        {
+            return await _cvBlogContext.Projects.FirstOrDefaultAsync(p => p.ProjectId == projectId);
+        }
+
+        public async Task<Hobby?> GetHobbyAsync(int hobbyId)
+        {
+            return await _cvBlogContext.Hobbies.FirstOrDefaultAsync(h => h.HobbyId == hobbyId);
+        }
+
+        public async Task<IEnumerable<Hobby>> GetHobbiesByResumeIdAsync(int resumeId)
+        {
+            return await _cvBlogContext.Hobbies.Where(h => h.ResumeId == resumeId).ToListAsync();
+        }
+
+        public async Task<Candidate?> GetCandidateByIdAsync(int candidateId)
+        {
+            return await _cvBlogContext.Candidates
+                .FirstOrDefaultAsync(c => c.CandidateId == candidateId);
+        }
+
+        // New write helpers
+        public void AddProject(Project project)
+        {
+            _cvBlogContext.Projects.Add(project);
+        }
+
+        public void UpdateProject(Project project)
+        {
+            _cvBlogContext.Projects.Update(project);
+        }
+
+        public void RemoveProject(Project project)
+        {
+            _cvBlogContext.Projects.Remove(project);
+        }
+
+        public void AddHobby(Hobby hobby)
+        {
+            _cvBlogContext.Hobbies.Add(hobby);
+        }
+
+        public void UpdateHobby(Hobby hobby)
+        {
+            _cvBlogContext.Hobbies.Update(hobby);
+        }
+
+        public void RemoveHobby(Hobby hobby)
+        {
+            _cvBlogContext.Hobbies.Remove(hobby);
+        }
+
+        public void AddSkill(Skill skill)
+        {
+            _cvBlogContext.Skills.Add(skill);
+        }
+
+        public void UpdateSkill(Skill skill)
+        {
+            _cvBlogContext.Skills.Update(skill);
+        }
+
+        public void RemoveSkill(Skill skill)
+        {
+            _cvBlogContext.Skills.Remove(skill);
+        }
+
+        public void AddAcademic(Academic academic)
+        {
+            _cvBlogContext.Academics.Add(academic);
+        }
+
+        public void UpdateAcademic(Academic academic)
+        {
+            _cvBlogContext.Academics.Update(academic);
+        }
+
+        public void RemoveAcademic(Academic academic)
+        {
+            _cvBlogContext.Academics.Remove(academic);
+        }
+
+        public void AddExperience(Experience experience)
+        {
+            _cvBlogContext.Experiences.Add(experience);
+        }
+
+        public void UpdateExperience(Experience experience)
+        {
+            _cvBlogContext.Experiences.Update(experience);
+        }
+
+        public void RemoveExperience(Experience experience)
+        {
+            _cvBlogContext.Experiences.Remove(experience);
+        }
+
+        public void AddExperienceDetails(ExperienceDetails details)
+        {
+            _cvBlogContext.ExperienceDetails.Add(details);
+        }
+
+        public void UpdateExperienceDetails(ExperienceDetails details)
+        {
+            _cvBlogContext.ExperienceDetails.Update(details);
+        }
+
+        public void RemoveExperienceDetails(ExperienceDetails details)
+        {
+            _cvBlogContext.ExperienceDetails.Remove(details);
+        }
+
+        public void AddCertification(Certification certification)
+        {
+            _cvBlogContext.Certifications.Add(certification);
+        }
+
+        public void UpdateCertification(Certification certification)
+        {
+            _cvBlogContext.Certifications.Update(certification);
+        }
+
+        public void RemoveCertification(Certification certification)
+        {
+            _cvBlogContext.Certifications.Remove(certification);
+        }
+
+        public void AddResume(Resume resume)
+        {
+            _cvBlogContext.Resumes.Add(resume);
+        }
+
+        public void UpdateResume(Resume resume)
+        {
+            _cvBlogContext.Resumes.Update(resume);
+        }
+
+        public void UpdateCandidate(Candidate candidate)
+        {
+            _cvBlogContext.Candidates.Update(candidate);
+        }
+
+        public void AddSocialLink(SocialLinks socialLink)
+        {
+            _cvBlogContext.SocialLinks.Add(socialLink);
+        }
+
+        public void UpdateSocialLink(SocialLinks socialLink)
+        {
+            _cvBlogContext.SocialLinks.Update(socialLink);
+        }
+
+        public async Task<bool> SaveChangesAsync()
+        {
+            return (await _cvBlogContext.SaveChangesAsync() >= 0);
+        }
     }
 }

PortBlog.API/Services/AdminService.cs

@@ -0,0 +1,552 @@
+using System.Security.Claims;
+using AutoMapper;
+using PortBlog.API.Entities;
+using PortBlog.API.Models;
+using PortBlog.API.Repositories.Contracts;
+using PortBlog.API.Services.Contracts;
+
+namespace PortBlog.API.Services
+{
+    /// <summary>
+    /// Service for administrative operations related to candidates, resumes, and their associated data.
+    /// </summary>
+    public class AdminService(ICandidateRepository candidateRepository, IResumeRepository resumeRepository, IMapper mapper) : IAdminService
+    {
+        public int GetCandidateIdFromClaims(ClaimsPrincipal user)
+        {
+            var candidateIdClaim = user.FindFirst("CandidateId")?.Value;
+            if (string.IsNullOrEmpty(candidateIdClaim) || !int.TryParse(candidateIdClaim, out var candidateId))
+            {
+                throw new UnauthorizedAccessException("CandidateId claim is missing or invalid.");
+            }
+            return candidateId;
+        }
+
+        public async Task<AboutDto?> GetHobbiesAsync(int candidateId)
+        {
+            var aboutDetails = await resumeRepository.GetHobbiesAsync(candidateId);
+            return aboutDetails != null ? mapper.Map<AboutDto>(aboutDetails) : null;
+        }
+
+        public async Task<CandidateSocialLinksDto?> GetContactAsync(int candidateId)
+        {
+            var contact = await resumeRepository.GetCandidateWithSocialLinksAsync(candidateId);
+            return contact != null ? mapper.Map<CandidateSocialLinksDto>(contact) : null;
+        }
+
+        public async Task<ResumeDto?> GetResumeAsync(int candidateId)
+        {
+            var resume = await resumeRepository.GetResumeAsync(candidateId);
+            return resume != null ? mapper.Map<ResumeDto>(resume) : null;
+        }
+
+        public async Task<ProjectsDto?> GetProjectsAsync(int candidateId)
+        {
+            var projects = await resumeRepository.GetProjectsAsync(candidateId);
+            return projects != null ? mapper.Map<ProjectsDto>(projects) : null;
+        }
+
+        public async Task<ProjectDto> UpsertProjectAsync(int candidateId, ProjectDto projectDto)
+        {
+            var resumeWithCollections = await GetOrCreateResumeWithCollectionsAsync(candidateId);
+
+            Project? projectEntity = null;
+            if (projectDto.ProjectId > 0)
+            {
+                projectEntity = await resumeRepository.GetProjectAsync(projectDto.ProjectId.Value);
+            }
+
+            if (projectEntity == null)
+            {
+                projectEntity = new Project
+                {
+                    Name = projectDto.Name,
+                    Description = projectDto.Description,
+                    Categories = projectDto.Categories ?? Array.Empty<string>(),
+                    Roles = projectDto.Roles != null ? string.Join(",", projectDto.Roles) : null,
+                    Responsibilities = projectDto.Responsibilities != null ? string.Join(",", projectDto.Responsibilities) : null,
+                    TechnologiesUsed = projectDto.TechnologiesUsed != null ? string.Join(",", projectDto.TechnologiesUsed) : null,
+                    Challenges = projectDto.Challenges,
+                    LessonsLearned = projectDto.LessonsLearned,
+                    Impact = projectDto.Impact,
+                    StartDate = projectDto.StartDate == default ? null : projectDto.StartDate,
+                    EndDate = projectDto.EndDate == default ? null : projectDto.EndDate,
+                    ImagePath = projectDto.ImagePath,
+                    Status = projectDto.Status,
+                    ResumeId = resumeWithCollections.ResumeId
+                };
+
+                resumeRepository.AddProject(projectEntity);
+            }
+            else
+            {
+                projectEntity.Name = projectDto.Name;
+                projectEntity.Description = projectDto.Description;
+                projectEntity.Categories = projectDto.Categories ?? Array.Empty<string>();
+                projectEntity.Roles = projectDto.Roles != null ? string.Join(",", projectDto.Roles) : projectEntity.Roles;
+                projectEntity.Responsibilities = projectDto.Responsibilities != null ? string.Join(",", projectDto.Responsibilities) : projectEntity.Responsibilities;
+                projectEntity.TechnologiesUsed = projectDto.TechnologiesUsed != null ? string.Join(",", projectDto.TechnologiesUsed) : projectEntity.TechnologiesUsed;
+                projectEntity.Challenges = projectDto.Challenges;
+                projectEntity.LessonsLearned = projectDto.LessonsLearned;
+                projectEntity.Impact = projectDto.Impact;
+                projectEntity.StartDate = projectDto.StartDate == default ? projectEntity.StartDate : projectDto.StartDate;
+                projectEntity.EndDate = projectDto.EndDate == default ? projectEntity.EndDate : projectDto.EndDate;
+                projectEntity.ImagePath = projectDto.ImagePath;
+                projectEntity.Status = projectDto.Status;
+
+                resumeRepository.UpdateProject(projectEntity);
+            }
+
+            await resumeRepository.SaveChangesAsync();
+
+            return mapper.Map<ProjectDto>(projectEntity);
+        }
+
+        public async Task<bool> DeleteProjectAsync(int candidateId, int projectId)
+        {
+            var resume = await resumeRepository.GetLatestResumeForCandidateAsync(candidateId, includeOtherData: false)
+                ?? throw new KeyNotFoundException($"Resume for candidate {candidateId} not found.");
+
+            var project = await resumeRepository.GetProjectAsync(projectId);
+            if (project == null || project.ResumeId != resume.ResumeId)
+            {
+                return false;
+            }
+
+            resumeRepository.RemoveProject(project);
+            await resumeRepository.SaveChangesAsync();
+            return true;
+        }
+
+        public async Task<AboutDto> UpsertHobbiesAsync(int candidateId, AboutDto aboutDto)
+        {
+            var resume = await resumeRepository.GetLatestResumeForCandidateAsync(candidateId, includeOtherData: false)
+                ?? throw new KeyNotFoundException($"Resume for candidate {candidateId} not found.");
+
+            // Update About
+            if (!string.IsNullOrWhiteSpace(aboutDto.About))
+            {
+                resume.About = aboutDto.About;
+                resumeRepository.UpdateResume(resume);
+            }
+
+            // Upsert Hobbies
+            var existingHobbies = (await resumeRepository.GetHobbiesByResumeIdAsync(resume.ResumeId)).ToList();
+            var incomingIds = aboutDto.Hobbies.Where(h => h.HobbyId > 0).Select(h => h.HobbyId).ToHashSet();
+
+            foreach (var existing in existingHobbies)
+            {
+                if (!incomingIds.Contains(existing.HobbyId))
+                {
+                    resumeRepository.RemoveHobby(existing);
+                }
+            }
+
+            var order = 1;
+            var resultEntities = new List<Hobby>();
+
+            foreach (var hobbyDto in aboutDto.Hobbies)
+            {
+                Hobby? hobbyEntity = null;
+
+                if (hobbyDto.HobbyId > 0)
+                {
+                    hobbyEntity = existingHobbies.FirstOrDefault(h => h.HobbyId == hobbyDto.HobbyId);
+                }
+
+                if (hobbyEntity == null)
+                {
+                    hobbyEntity = new Hobby
+                    {
+                        Name = hobbyDto.Name,
+                        Description = hobbyDto.Description,
+                        Icon = hobbyDto.Icon,
+                        ResumeId = resume.ResumeId,
+                        Order = order
+                    };
+                    resumeRepository.AddHobby(hobbyEntity);
+                }
+                else
+                {
+                    hobbyEntity.Name = hobbyDto.Name;
+                    hobbyEntity.Description = hobbyDto.Description;
+                    hobbyEntity.Icon = hobbyDto.Icon;
+                    hobbyEntity.Order = order;
+                    resumeRepository.UpdateHobby(hobbyEntity);
+                }
+
+                resultEntities.Add(hobbyEntity);
+                order++;
+            }
+
+            await resumeRepository.SaveChangesAsync();
+
+            return new AboutDto
+            {
+                About = resume.About,
+                Hobbies = mapper.Map<ICollection<HobbyDto>>(resultEntities)
+            };
+        }
+
+        public async Task<CandidateSocialLinksDto> UpsertContactAsync(int candidateId, CandidateSocialLinksDto contactDto)
+        {
+            var resume = await resumeRepository.GetCandidateWithSocialLinksAsync(candidateId)
+                ?? throw new KeyNotFoundException($"Resume with candidate id {candidateId} not found.");
+
+            if (!string.IsNullOrWhiteSpace(contactDto.Title))
+            {
+                resume.Title = contactDto.Title;
+                resumeRepository.UpdateResume(resume);
+            }
+
+            if (contactDto.Candidate != null && resume.Candidate != null)
+            {
+                resume.Candidate.FirstName = contactDto.Candidate.FirstName;
+                resume.Candidate.LastName = contactDto.Candidate.LastName;
+                resume.Candidate.Email = contactDto.Candidate.Email;
+                resume.Candidate.Phone = contactDto.Candidate.Phone;
+                resume.Candidate.Address = contactDto.Candidate.Address;
+
+                resumeRepository.UpdateCandidate(resume.Candidate);
+            }
+
+            if (contactDto.SocialLinks != null)
+            {
+                if (resume.SocialLinks == null)
+                {
+                    resume.SocialLinks = new SocialLinks
+                    {
+                        ResumeId = resume.ResumeId,
+                        GitHub = contactDto.SocialLinks.GitHub,
+                        Linkedin = contactDto.SocialLinks.Linkedin,
+                        Instagram = contactDto.SocialLinks.Instagram,
+                        Facebook = contactDto.SocialLinks.Facebook,
+                        Twitter = contactDto.SocialLinks.Twitter,
+                        PersonalWebsite = contactDto.SocialLinks.PersonalWebsite,
+                        BlogUrl = contactDto.SocialLinks.BlogUrl
+                    };
+                    resumeRepository.AddSocialLink(resume.SocialLinks);
+                }
+                else
+                {
+                    resume.SocialLinks.GitHub = contactDto.SocialLinks.GitHub;
+                    resume.SocialLinks.Linkedin = contactDto.SocialLinks.Linkedin;
+                    resume.SocialLinks.Instagram = contactDto.SocialLinks.Instagram;
+                    resume.SocialLinks.Facebook = contactDto.SocialLinks.Facebook;
+                    resume.SocialLinks.Twitter = contactDto.SocialLinks.Twitter;
+                    resume.SocialLinks.PersonalWebsite = contactDto.SocialLinks.PersonalWebsite;
+                    resume.SocialLinks.BlogUrl = contactDto.SocialLinks.BlogUrl;
+
+                    resumeRepository.UpdateSocialLink(resume.SocialLinks);
+                }
+            }
+
+            await resumeRepository.SaveChangesAsync();
+
+            var updatedContact = await resumeRepository.GetCandidateWithSocialLinksAsync(candidateId);
+            return mapper.Map<CandidateSocialLinksDto>(updatedContact);
+        }
+
+        public async Task<IEnumerable<SkillDto>> UpsertSkillsAsync(int candidateId, IEnumerable<SkillDto> skillDtos)
+        {
+            var resumeWithCollections = await GetOrCreateResumeWithCollectionsAsync(candidateId);
+
+            UpsertSkills(resumeWithCollections, skillDtos.ToList());
+
+            await resumeRepository.SaveChangesAsync();
+
+            var updatedResume = await resumeRepository.GetByIdWithCollectionsAsync(resumeWithCollections.ResumeId);
+            return mapper.Map<IEnumerable<SkillDto>>(updatedResume?.Skills ?? []);
+        }
+
+        public async Task<IEnumerable<AcademicDto>> UpsertAcademicsAsync(int candidateId, IEnumerable<AcademicDto> academicDtos)
+        {
+            var resumeWithCollections = await GetOrCreateResumeWithCollectionsAsync(candidateId);
+
+            UpsertAcademics(resumeWithCollections, academicDtos.ToList());
+
+            await resumeRepository.SaveChangesAsync();
+
+            var updatedResume = await resumeRepository.GetByIdWithCollectionsAsync(resumeWithCollections.ResumeId);
+            return mapper.Map<IEnumerable<AcademicDto>>(updatedResume?.Academics ?? []);
+        }
+
+        public async Task<IEnumerable<ExperienceDto>> UpsertExperiencesAsync(int candidateId, IEnumerable<ExperienceDto> experienceDtos)
+        {
+            var resumeWithCollections = await GetOrCreateResumeWithCollectionsAsync(candidateId);
+
+            UpsertExperiences(resumeWithCollections, experienceDtos.ToList());
+
+            await resumeRepository.SaveChangesAsync();
+
+            var updatedResume = await resumeRepository.GetByIdWithCollectionsAsync(resumeWithCollections.ResumeId);
+            return mapper.Map<IEnumerable<ExperienceDto>>(updatedResume?.Experiences ?? []);
+        }
+
+        public async Task<IEnumerable<CertificationDto>> UpsertCertificationsAsync(int candidateId, IEnumerable<CertificationDto> certificationDtos)
+        {
+            var resumeWithCollections = await GetOrCreateResumeWithCollectionsAsync(candidateId);
+
+            UpsertCertifications(resumeWithCollections, certificationDtos.ToList());
+
+            await resumeRepository.SaveChangesAsync();
+
+            var updatedResume = await resumeRepository.GetByIdWithCollectionsAsync(resumeWithCollections.ResumeId);
+            return mapper.Map<IEnumerable<CertificationDto>>(updatedResume?.Certifications ?? []);
+        }
+
+        #region Private Helpers
+
+        private async Task<Resume> GetOrCreateResumeWithCollectionsAsync(int candidateId)
+        {
+            var resume = await resumeRepository.GetLatestResumeForCandidateAsync(candidateId, includeOtherData: false);
+
+            if (resume == null)
+            {
+                resume = new Resume
+                {
+                    CandidateId = candidateId,
+                    About = string.Empty,
+                    Order = 1
+                };
+
+                resumeRepository.AddResume(resume);
+                await resumeRepository.SaveChangesAsync();
+            }
+
+            return await resumeRepository.GetByIdWithCollectionsAsync(resume.ResumeId)
+                ?? throw new InvalidOperationException("Failed to reload resume with collections.");
+        }
+
+        private void UpsertSkills(Resume resume, ICollection<SkillDto> skillDtos)
+        {
+            var existingSkills = resume.Skills.ToList();
+            var incomingIds = skillDtos.Where(s => s.SkillId > 0).Select(s => s.SkillId).ToHashSet();
+
+            foreach (var existing in existingSkills)
+            {
+                if (!incomingIds.Contains(existing.SkillId))
+                {
+                    resumeRepository.RemoveSkill(existing);
+                }
+            }
+
+            foreach (var skillDto in skillDtos)
+            {
+                var skillEntity = skillDto.SkillId > 0
+                    ? existingSkills.FirstOrDefault(s => s.SkillId == skillDto.SkillId)
+                    : null;
+
+                if (skillEntity == null)
+                {
+                    resumeRepository.AddSkill(new Skill
+                    {
+                        Name = skillDto.Name,
+                        Description = skillDto.Description,
+                        ProficiencyLevel = skillDto.ProficiencyLevel,
+                        ResumeId = resume.ResumeId
+                    });
+                }
+                else
+                {
+                    skillEntity.Name = skillDto.Name;
+                    skillEntity.Description = skillDto.Description;
+                    skillEntity.ProficiencyLevel = skillDto.ProficiencyLevel;
+                    resumeRepository.UpdateSkill(skillEntity);
+                }
+            }
+        }
+
+        private void UpsertAcademics(Resume resume, ICollection<AcademicDto> academicDtos)
+        {
+            var existingAcademics = resume.Academics.ToList();
+            var incomingIds = academicDtos.Where(a => a.AcademicId > 0).Select(a => a.AcademicId).ToHashSet();
+
+            foreach (var existing in existingAcademics)
+            {
+                if (!incomingIds.Contains(existing.AcademicId))
+                {
+                    resumeRepository.RemoveAcademic(existing);
+                }
+            }
+
+            foreach (var academicDto in academicDtos)
+            {
+                var academicEntity = academicDto.AcademicId > 0
+                    ? existingAcademics.FirstOrDefault(a => a.AcademicId == academicDto.AcademicId)
+                    : null;
+
+                if (academicEntity == null)
+                {
+                    resumeRepository.AddAcademic(new Academic
+                    {
+                        Institution = academicDto.Institution,
+                        StartYear = academicDto.StartYear,
+                        EndYear = academicDto.EndYear,
+                        Degree = academicDto.Degree,
+                        DegreeSpecialization = academicDto.DegreeSpecialization,
+                        ResumeId = resume.ResumeId
+                    });
+                }
+                else
+                {
+                    academicEntity.Institution = academicDto.Institution;
+                    academicEntity.StartYear = academicDto.StartYear;
+                    academicEntity.EndYear = academicDto.EndYear;
+                    academicEntity.Degree = academicDto.Degree;
+                    academicEntity.DegreeSpecialization = academicDto.DegreeSpecialization;
+                    resumeRepository.UpdateAcademic(academicEntity);
+                }
+            }
+        }
+
+        private void UpsertExperiences(Resume resume, ICollection<ExperienceDto> experienceDtos)
+        {
+            var existingExperiences = resume.Experiences.ToList();
+            var incomingIds = experienceDtos.Where(e => e.ExperienceId > 0).Select(e => e.ExperienceId).ToHashSet();
+
+            foreach (var existing in existingExperiences)
+            {
+                if (!incomingIds.Contains(existing.ExperienceId))
+                {
+                    foreach (var detail in existing.Details.ToList())
+                    {
+                        resumeRepository.RemoveExperienceDetails(detail);
+                    }
+                    resumeRepository.RemoveExperience(existing);
+                }
+            }
+
+            foreach (var experienceDto in experienceDtos)
+            {
+                var experienceEntity = experienceDto.ExperienceId > 0
+                    ? existingExperiences.FirstOrDefault(e => e.ExperienceId == experienceDto.ExperienceId)
+                    : null;
+
+                if (experienceEntity == null)
+                {
+                    experienceEntity = new Experience
+                    {
+                        Title = experienceDto.Title,
+                        Description = experienceDto.Description,
+                        Company = experienceDto.Company,
+                        Location = experienceDto.Location ?? string.Empty,
+                        StartDate = experienceDto.StartDate ?? DateTime.UtcNow,
+                        EndDate = experienceDto.EndDate,
+                        ResumeId = resume.ResumeId
+                    };
+                    resumeRepository.AddExperience(experienceEntity);
+
+                    var detailOrder = 1;
+                    foreach (var detailDto in experienceDto.Details)
+                    {
+                        resumeRepository.AddExperienceDetails(new ExperienceDetails
+                        {
+                            Details = detailDto.Details,
+                            Order = detailOrder++,
+                            Experience = experienceEntity
+                        });
+                    }
+                }
+                else
+                {
+                    experienceEntity.Title = experienceDto.Title;
+                    experienceEntity.Description = experienceDto.Description;
+                    experienceEntity.Company = experienceDto.Company;
+                    if (!string.IsNullOrWhiteSpace(experienceDto.Location))
+                        experienceEntity.Location = experienceDto.Location;
+                    if (experienceDto.StartDate.HasValue)
+                        experienceEntity.StartDate = experienceDto.StartDate.Value;
+                    experienceEntity.EndDate = experienceDto.EndDate;
+
+                    resumeRepository.UpdateExperience(experienceEntity);
+                    UpsertExperienceDetails(experienceEntity, experienceDto.Details);
+                }
+            }
+        }
+
+        private void UpsertExperienceDetails(Experience experience, ICollection<ExperienceDetailsDto> detailDtos)
+        {
+            var existingDetails = experience.Details.ToList();
+            var incomingIds = detailDtos.Where(d => d.Id > 0).Select(d => d.Id).ToHashSet();
+
+            foreach (var existing in existingDetails)
+            {
+                if (!incomingIds.Contains(existing.Id))
+                {
+                    resumeRepository.RemoveExperienceDetails(existing);
+                }
+            }
+
+            var order = 1;
+            foreach (var detailDto in detailDtos)
+            {
+                var detailEntity = detailDto.Id > 0
+                    ? existingDetails.FirstOrDefault(d => d.Id == detailDto.Id)
+                    : null;
+
+                if (detailEntity == null)
+                {
+                    resumeRepository.AddExperienceDetails(new ExperienceDetails
+                    {
+                        Details = detailDto.Details,
+                        Order = order,
+                        ExperienceId = experience.ExperienceId
+                    });
+                }
+                else
+                {
+                    detailEntity.Details = detailDto.Details;
+                    detailEntity.Order = order;
+                    resumeRepository.UpdateExperienceDetails(detailEntity);
+                }
+                order++;
+            }
+        }
+
+        private void UpsertCertifications(Resume resume, ICollection<CertificationDto> certificationDtos)
+        {
+            var existingCertifications = resume.Certifications.ToList();
+            var incomingIds = certificationDtos.Where(c => c.CertificationId > 0).Select(c => c.CertificationId).ToHashSet();
+
+            foreach (var existing in existingCertifications)
+            {
+                if (!incomingIds.Contains(existing.CertificationId))
+                {
+                    resumeRepository.RemoveCertification(existing);
+                }
+            }
+
+            foreach (var certDto in certificationDtos)
+            {
+                var existingCert = certDto.CertificationId > 0
+                    ? existingCertifications.FirstOrDefault(c => c.CertificationId == certDto.CertificationId)
+                    : null;
+
+                if (existingCert == null)
+                {
+                    resumeRepository.AddCertification(new Certification
+                    {
+                        CertificationName = certDto.CertificationName,
+                        IssuingOrganization = certDto.IssuingOrganization,
+                        CertificationLink = certDto.CertificationLink,
+                        IssueDate = certDto.IssueDate,
+                        ExpiryDate = certDto.ExpiryDate,
+                        ResumeId = resume.ResumeId
+                    });
+                }
+                else
+                {
+                    existingCert.CertificationName = certDto.CertificationName;
+                    existingCert.IssuingOrganization = certDto.IssuingOrganization;
+                    existingCert.CertificationLink = certDto.CertificationLink;
+                    existingCert.IssueDate = certDto.IssueDate;
+                    existingCert.ExpiryDate = certDto.ExpiryDate;
+                    resumeRepository.UpdateCertification(existingCert);
+                }
+            }
+        }
+
+        #endregion
+    }
+}

PortBlog.API/Services/AuthService.cs

@@ -56,12 +56,19 @@ namespace PortBlog.API.Services
         /// <returns>The generated JWT access token as a string.</returns>
         public string GenerateAccessToken(string username)
         {
-            var claims = new[]
+            var candidate = context.Candidates.FirstOrDefault(c => c.Email == username);
+
+            var claims = new List<Claim>
             {
                 new Claim(ClaimTypes.Name, username),
                 new Claim(ClaimTypes.Role, "Admin")
             };
 
+            if (candidate != null)
+            {
+                claims.Add(new Claim("CandidateId", candidate.CandidateId.ToString()));
+            }
+
             var jwtKey = configuration["Jwt:Key"];
             if (string.IsNullOrEmpty(jwtKey))
                 throw new InvalidOperationException("JWT key is not configured.");

PortBlog.API/Services/Contracts/IAdminService.cs

@@ -0,0 +1,37 @@
+using System.Security.Claims;
+using PortBlog.API.Models;
+
+namespace PortBlog.API.Services.Contracts
+{
+    /// <summary>
+    /// Service for administrative operations related to candidates, resumes, and their associated data.
+    /// </summary>
+    public interface IAdminService
+    {
+        int GetCandidateIdFromClaims(ClaimsPrincipal user);
+
+        Task<AboutDto?> GetHobbiesAsync(int candidateId);
+
+        Task<CandidateSocialLinksDto?> GetContactAsync(int candidateId);
+
+        Task<ResumeDto?> GetResumeAsync(int candidateId);
+
+        Task<ProjectsDto?> GetProjectsAsync(int candidateId);
+
+        Task<ProjectDto> UpsertProjectAsync(int candidateId, ProjectDto projectDto);
+
+        Task<bool> DeleteProjectAsync(int candidateId, int projectId);
+
+        Task<AboutDto> UpsertHobbiesAsync(int candidateId, AboutDto aboutDto);
+
+        Task<IEnumerable<SkillDto>> UpsertSkillsAsync(int candidateId, IEnumerable<SkillDto> skillDtos);
+
+        Task<IEnumerable<AcademicDto>> UpsertAcademicsAsync(int candidateId, IEnumerable<AcademicDto> academicDtos);
+
+        Task<IEnumerable<ExperienceDto>> UpsertExperiencesAsync(int candidateId, IEnumerable<ExperienceDto> experienceDtos);
+
+        Task<IEnumerable<CertificationDto>> UpsertCertificationsAsync(int candidateId, IEnumerable<CertificationDto> certificationDtos);
+
+        Task<CandidateSocialLinksDto> UpsertContactAsync(int candidateId, CandidateSocialLinksDto contactDto);
+    }
+}

PortBlog.Tests/PortBlog.Tests.csproj

@@ -0,0 +1,21 @@
+<Project Sdk="Microsoft.NET.Sdk">
+
+  <PropertyGroup>
+    <TargetFramework>net10.0</TargetFramework>
+    <ImplicitUsings>enable</ImplicitUsings>
+    <Nullable>enable</Nullable>
+    <IsPackable>false</IsPackable>
+  </PropertyGroup>
+
+  <ItemGroup>
+    <PackageReference Include="coverlet.collector" Version="6.0.4" />
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.14.1" />
+    <PackageReference Include="xunit" Version="2.9.3" />
+    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.4" />
+  </ItemGroup>
+
+  <ItemGroup>
+    <Using Include="Xunit" />
+  </ItemGroup>
+
+</Project>