This collection documents the Room Hotel API for the Digital Booking platform. It focuses on hotel room management and the supporting resources required to operate the booking domain, including categories, features, authentication, and user role administration.
\nThe requests in this collection are aimed at local development and testing. Most endpoints use the base URL below:
\nhttp://localhost:8080\n\nThis collection includes examples of common workflows such as registering and logging in users, creating rooms, listing rooms, retrieving room details, editing rooms, deleting resources, and managing categories and features.
\nAuthentication appears to be role-based for some operations. Based on the request names, endpoints labeled with terms such as needtokenadmin, with_token_admin, or similar likely require an authenticated administrator token, while endpoints labeled without_token help validate unauthorized-access behavior. If your API returns a JWT or bearer token from the authentication endpoints, use that token in subsequent protected requests.
For initial admin setup, if you need to grant ADMIN permissions to a regular user, an operator can use the H2 console and run the following SQL statement against the USERS table, replacing the email value as needed:
UPDATE USERS SET ROLE = 'ROLE_ADMIN' WHERE EMAIL = '***';\nAfter this initial elevation, admin permissions for any other registered user can be granted or revoked from the Admin interface.
\nAt a high level, the collection covers these resource areas:
\nPOST /api/auth/register and POST /api/auth/login for account creation and sign-in
GET, POST, PUT, and DELETE operations for /api/rooms
GET, POST, and DELETE operations for /api/categories
GET, POST, and DELETE operations for /api/features
Administrative user operations under /api/users
Use this collection as a reference for available endpoints and expected intent of each request. Where saved examples are not present, the documentation is based on the request name, method, URL shape, and resource path so consumers can still understand how to use the API without assuming undocumented response payloads.
\n","schema":"https://schema.getpostman.com/json/collection/v2.0.0/collection.json","toc":[],"owner":"33164372","collectionId":"b0867e11-7bfe-45f2-9f16-15cba8b4bb63","publishedId":"2sBXietaPi","public":true,"customColor":{"top-bar":"FFFFFF","right-sidebar":"303030","highlight":"FF6C37"},"publishDate":"2026-04-09T21:10:07.000Z"},"item":[{"name":"create_room_v1","id":"6b33c68f-fc36-41f7-898d-e6d43245a4e2","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"auth":{"type":"bearer","bearer":{"basicConfig":[{"key":"token","value":"para dar permisos de ADMIN a un USER \"común\" en la consola de H2 ingresar:
\nUPDATE USERS SET ROLE = 'ROLE_ADMIN' WHERE EMAIL = '* * *';
\nluego se puede dar/quitar permisos desde la interfaz de Admin a cualquier otro usuario registrado
\n","urlObject":{"protocol":"http","port":"8080","path":["api","auth","register"],"host":["localhost"],"query":[],"variable":[]}},"response":[],"_postman_id":"7a32b2e6-a4ad-4208-b96f-8a278d52c3c5"},{"name":"login_of_test_ADMIN","id":"a5da3d37-4927-46c3-8bbe-24ee0c89be43","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json","type":"text"}],"body":{"mode":"raw","raw":"{\n \"email\": \"admin@digitalbooking.com\",\n \"password\": \"qwerty12345\"\n}"},"url":"http://localhost:8080/api/auth/login","description":"para dar permisos de ADMIN a un USER \"común\" en la consola de H2 ingresar:
\nUPDATE USERS SET ROLE = 'ROLE_ADMIN' WHERE EMAIL = '* * *';
\nluego se puede dar/quitar permisos desde la interfaz de Admin a cualquier otro usuario registrado
\n","urlObject":{"protocol":"http","port":"8080","path":["api","auth","login"],"host":["localhost"],"query":[],"variable":[]}},"response":[],"_postman_id":"a5da3d37-4927-46c3-8bbe-24ee0c89be43"},{"name":"login_user","id":"73ca0b81-c5d3-4cc6-9658-60af6dd581ee","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json","type":"text"}],"body":{"mode":"raw","raw":"{\n \"email\": \"juan@test.com\",\n \"password\": \"123456\"\n}","options":{"raw":{"language":"json"}}},"url":"http://localhost:8080/api/auth/login","urlObject":{"protocol":"http","port":"8080","path":["api","auth","login"],"host":["localhost"],"query":[],"variable":[]}},"response":[],"_postman_id":"73ca0b81-c5d3-4cc6-9658-60af6dd581ee"},{"name":"register_user","id":"f470bcfe-eab4-4f58-b959-ba82100f7980","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"method":"POST","header":[{"key":"Content-Type","value":"application/json","type":"text"}],"body":{"mode":"raw","raw":"{\n \"firstName\": \"Juan\",\n \"lastName\": \"Perez\",\n \"email\": \"juan@test.com\",\n \"password\": \"123456\"\n}","options":{"raw":{"language":"json"}}},"url":"http://localhost:8080/api/auth/register","urlObject":{"protocol":"http","port":"8080","path":["api","auth","register"],"host":["localhost"],"query":[],"variable":[]}},"response":[],"_postman_id":"f470bcfe-eab4-4f58-b959-ba82100f7980"},{"name":"delete_category","id":"9465c077-f9ba-48d6-a10d-b4c9a49891b6","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"auth":{"type":"bearer","bearer":{"basicConfig":[{"key":"token","value":"para cambiar Rol de usuario:
\nbody: { \"role\": \"ROLE_ADMIN\" } || body: { \"role\": \"ROLE_USER\" }
\n","urlObject":{"protocol":"http","port":"8080","path":["api","users","2","role"],"host":["localhost"],"query":[],"variable":[]}},"response":[],"_postman_id":"4619d1f0-61a8-4191-89b6-5f7e7b89728d"},{"name":"edit_room_with_all_options","id":"1bfd8941-4a3e-4e66-9c70-2638162780e8","protocolProfileBehavior":{"disableBodyPruning":true},"request":{"auth":{"type":"bearer","bearer":{"basicConfig":[{"key":"token","value":"