Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/sainiabhishek/nodejs_auth-api
A backend authentication & authorization project to handle the scale and complexity of an application. It is design while keeping the different environments in the mind.
https://github.com/sainiabhishek/nodejs_auth-api
backend-api cookie-parser cors error-handling eslint expressjs joi jwt mongodb moongose nodejs prettier rate-limiter security tokens typescript winston
Last synced: 6 days ago
JSON representation
A backend authentication & authorization project to handle the scale and complexity of an application. It is design while keeping the different environments in the mind.
- Host: GitHub
- URL: https://github.com/sainiabhishek/nodejs_auth-api
- Owner: SAINIAbhishek
- Created: 2023-09-24T06:44:01.000Z (over 1 year ago)
- Default Branch: main
- Last Pushed: 2024-11-29T10:56:40.000Z (about 2 months ago)
- Last Synced: 2024-11-29T11:37:49.463Z (about 2 months ago)
- Topics: backend-api, cookie-parser, cors, error-handling, eslint, expressjs, joi, jwt, mongodb, moongose, nodejs, prettier, rate-limiter, security, tokens, typescript, winston
- Language: TypeScript
- Homepage:
- Size: 358 KB
- Stars: 1
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Node.js Authentication & Authorization Backend Typescript Project (Learning project) [](https://github.com/SAINIAbhishek/nodejs_auth-api/actions/workflows/ci.yml)
This project is a scalable, well-structured Node.js backend built with TypeScript. It's designed to handle the complexity and scale of modern applications, while being optimized for different environments.
The codebase follows best practices for Node.js development, with a logical directory structure organized by functionality and type, ensuring maintainability and clarity.
## Features
- **TypeScript:** Enhances development with static typing, leading to more reliable and maintainable code.
- **Request Limiter:** Prevents abuse or overload of routes by limiting request rates, enhancing security.
- **Centralized Error Handling:** Streamlines error management and maintains a consistent user experience.
- **API Versioning:** Organizes routes and ensures compatibility, preventing breaking changes for existing clients.
- **Role-Based Access Control:** Provides fine-grained access management based on user roles.
- **JWT Authentication:** Secures user authentication and authorization using JSON Web Tokens.
- **Password Reset via Email:** Enhances account security and recovery options through email notifications.
- **MongoDB with Mongoose:** Utilizes MongoDB for its speed and scalability, with Mongoose simplifying database interactions.
- **ESLint:** Enforces coding standards and best practices for improved code quality.
- **Prettier:** Formats code consistently according to predefined rules.
- **Cookies for Tokens:** Uses cookies to store tokens securely, improving authentication and session management.
- **Logging:** Utilizes Winston for robust and flexible logging, aiding in debugging and monitoring.
- **Middleware for Exception Handling:** Improves error management within async Express routes.
- **Swagger (OpenAPI):** Automatically generates API documentation, allowing easy access to all available endpoints and their descriptions.
## Stacks
- Node.js
- Express.js
- Typescript
- Mongoose
- MongoDb
- Joi
- JWT
- Cookies
- Winston
- Rate Limiter
- Roles
- Nodemailer
- Docker image ([API Image](https://hub.docker.com/r/sainiabhishek/nodejs_auth-api))
- Swagger (OpenAPI)
### Setup MAILTRAP
To test email functionality, use Mailtrap: [Mailtrap](https://mailtrap.io/). Create your credentials and place them in the `.env` file under **Mailtrap (Email Service) Info**.
### How to setup the project
- Clone the repository and navigate to the root directory in your terminal.
- Install the project dependencies by running the following command:
```bash
npm run install:packages
```
- Duplicate the `.env.example` file and save the copy as `.env` in the server directory. Modify the variables as needed.
### How to run the project
- After installing the dependencies, you can either:
- Go to the `package.json` file and click on the play button next to the `watch` script under the "scripts" section.
- Or, run the following command in your terminal:
```bash
npm run watch
```
### API Access
```bash
http://localhost:3001/api/v1/
```
### Swagger UI
To access the interactive Swagger documentation for the API, navigate to:
```bash
http://localhost:3001/api-docs/v1/
```
This will open a web page where you can view and interact with all available API endpoints. Swagger allows you to explore the API, see request and response formats, and even make requests directly from the interface.
### Testing with Postman
You can test the API routes using Postman. Follow these steps:
- Ensure Postman is installed.
- Start the server and verify it's running on the correct port.
### Generating Secret Tokens
- To generate a secret token and refresh token for the `.env` file, open your terminal and run:
```bash
node
```
- Then, in the Node.js REPL:
```bash
require('crypto').randomBytes(64).toString('hex')
```
### Running the Project with Docker Compose
- Ensure Docker is installed on your computer.
- Copy or rename the `.env.example` file to `.env`, and fill in the required values based on your environment. Additionally, you may update the necessary values in the docker-compose.yml file as required.
- Open your terminal.
- Run the following command:
```bash
docker-compose up -d
```
This command will fetch all necessary libraries and dependencies, set up the environment, and start the services as defined in your docker-compose.yml file. Follow any additional setup or configuration instructions provided in the README file.
#### TODO
- Email Verification (Account Activation)
- Implement Testing: Add comprehensive unit and integration tests to ensure code reliability and maintainability.