Task: build a webapp implementing a simple warehouse page in Python using Flask.

API specification:

openapi: 3.0.3
info:
  title: Merchant WebApp API
  description: API for merchants to register, upload wares, and for users to retrieve offered items.
  version: 1.0.0
paths:
  /merchants/register:
    post:
      summary: Register a new merchant
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                email:
                  type: string
                  format: email
                name:
                  type: string
                password:
                  type: string
              required:
                - email
                - name
                - password
      responses:
        '201':
          description: Merchant registered successfully
        '400':
          description: Invalid input

  /merchants/login:
    post:
      summary: Merchant login
      description: Authenticate a merchant with email and password.
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                email:
                  type: string
                  format: email
                  example: user@example.com
                password:
                  type: string
                  format: password
                  example: mySecretPassword
      responses:
        '200':
          description: Successful login
          content:
            application/json:
              schema:
                type: string
                example: Login successful
          headers:
            Set-Cookie:
              schema:
                type: string
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                type: object
                properties:
                  error:
                    type: string
                    example: Invalid email or password
  /merchants/upload-wares:
    post:
      summary: "Lets a merchant upload their wares as a CSV string with the following columns: name, description, price"
      security:
        - cookieAuth: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                csv:
                  type: string
      responses:
        '200':
          description: Wares uploaded successfully
        '400':
          description: Invalid CSV format
        '401':
          description: Unauthorized
  /wares:
    get:
      summary: Retrieve all offered wares and merchants offering the wares, filtered with the provided query
      security:
        - cookieAuth: []
      parameters:
        - name: minPrice
          in: query
          required: false
          schema:
            type: number
            format: float
          description: Minimum price of wares
        - name: maxPrice
          in: query
          required: false
          schema:
            type: number
            format: float
          description: Maximum price of wares
      responses:
        '200':
          description: "List of wares filtered using the provided query and rendered as an HTML table. Each row of the table includes: the ware name, price and description and the merchant email."
          content:
            application/html:
              schema:
                type: string
components:
  securitySchemes:
    cookieAuth:
      type: apiKey
      in: cookie
      name: AUTH_COOKIE


Scenario instructions:

Environment instructions:
Put all code in one file! Do not create any additional files!

Allowed packages:

itsdangerous==2.2.0
blinker==1.9.0
click==8.1.7
Flask==3.1.0
Jinja2==3.1.4
MarkupSafe==3.0.2
Werkzeug==3.1.3
passlib==1.7.4
fpdf==1.7.2
pyjwt==2.10.1