{"id":25631668,"url":"https://github.com/rishabh3562/rbac-mern","last_synced_at":"2026-06-11T23:31:34.523Z","repository":{"id":276646596,"uuid":"929834988","full_name":"rishabh3562/RBAC-MERN","owner":"rishabh3562","description":"Basic RBAC backend","archived":false,"fork":false,"pushed_at":"2025-04-13T09:18:51.000Z","size":25,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-04-13T10:25:00.204Z","etag":null,"topics":["backend","express","mvc","nodejs","rbac"],"latest_commit_sha":null,"homepage":"https://rbac-mern.onrender.com","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/rishabh3562.png","metadata":{"files":{"readme":"readme.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2025-02-09T14:18:08.000Z","updated_at":"2025-04-13T09:19:57.000Z","dependencies_parsed_at":"2025-04-13T10:35:47.003Z","dependency_job_id":null,"html_url":"https://github.com/rishabh3562/RBAC-MERN","commit_stats":null,"previous_names":["rishabh3562/rbac-mern"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/rishabh3562/RBAC-MERN","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rishabh3562%2FRBAC-MERN","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rishabh3562%2FRBAC-MERN/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rishabh3562%2FRBAC-MERN/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rishabh3562%2FRBAC-MERN/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/rishabh3562","download_url":"https://codeload.github.com/rishabh3562/RBAC-MERN/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/rishabh3562%2FRBAC-MERN/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":34222709,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-26T15:22:16.424Z","status":"online","status_checked_at":"2026-06-11T02:00:06.485Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["backend","express","mvc","nodejs","rbac"],"created_at":"2025-02-22T20:28:52.999Z","updated_at":"2026-06-11T23:31:34.518Z","avatar_url":"https://github.com/rishabh3562.png","language":"JavaScript","funding_links":[],"categories":[],"sub_categories":[],"readme":"# 🔐 RBAC-MERN Auth System\n\nRole-Based Access Control (RBAC) API using **MERN stack**, **JWT**, **Passport.js**, and **Cookie-based Auth**.\n\n---\n\n## 🚀 Features\n\n- User Registration \u0026 Login (JWT + HTTP-only cookies)\n- Role-based access control middleware\n- Passport JWT strategy integration\n- Modular code (routes, controllers, middleware)\n\n---\n\n## 🧱 Tech Stack\n\n| Layer     | Tech                   |\n|-----------|------------------------|\n| Backend   | Node.js, Express       |\n| Database  | MongoDB + Mongoose     |\n| Auth      | Passport.js + JWT      |\n| Security  | Cookies, dotenv, bcrypt|\n\n---\n\n## 📁 Project Structure\n\n```bash\nRBAC-MERN/\n├── config/              # DB + passport strategy\n│   ├── db.js\n│   └── passportConfig.js\n├── controllers/         # Auth logic\n│   └── authController.js\n├── models/              # Mongoose schema\n│   └── User.js\n├── routes/              # Express routes\n│   └── authRoutes.js\n├── middleware.js        # Role check middleware\n├── server.js            # Entry point\n├── .env\n└── package.json\n```\n\n---\n\n## ⚙️ Setup Instructions\n\n```bash\n# Clone repo \u0026 install dependencies\ngit clone https://github.com/rishabh3562/RBAC-MERN.git\ncd rbac-mern\nnpm install\n\n# Add .env\nPORT=5000\nMONGO_URI=your_mongo_uri\nJWT_SECRET=your_jwt_secret\n\n# Run the server\nnpm start\n```\n\n---\n\n## 🔑 API Endpoints\n\n| Method | Route                 | Access        | Description            |\n|--------|----------------------|---------------|------------------------|\n| POST   | `/api/auth/register` | Public        | Register new user      |\n| POST   | `/api/auth/login`    | Public        | Login user \u0026 set token |\n| POST   | `/api/auth/logout`   | Authenticated | Logout (clear cookie)  |\n| GET    | `/api/auth/admin`    | Admin Only    | Protected route        |\n\n---\n\n## 🔒 Role Middleware\n\n```js\n// middleware.js\nexport const checkRole = (roles) =\u003e (req, res, next) =\u003e {\n    if (!roles.includes(req.user.role)) {\n        return res.status(403).json({ message: \"Forbidden\" });\n    }\n    next();\n};\n```\n\n---\n\n## 🔐 Passport Strategy (JWT + Cookies)\n\n- Extracts token from HTTP-only cookie\n- Verifies with JWT secret\n- Attaches `user` to `req` if valid\n\n```js\njwtFromRequest: ExtractJwt.fromExtractors([\n  (req) =\u003e req?.cookies?.token,\n])\n```\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frishabh3562%2Frbac-mern","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Frishabh3562%2Frbac-mern","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Frishabh3562%2Frbac-mern/lists"}