A robust Node.js server with Express.js featuring comprehensive authentication and user management capabilities.

• 🔐 JWT-based Authentication - Secure token-based authentication
• 👥 User Management - Registration, login, profile management
• 🛡️ Role-based Access Control - User, moderator, and admin roles
• 🔒 Password Security - Bcrypt hashing with salt
• ✅ Input Validation - Comprehensive validation using express-validator
• 🚀 Security Features - Helmet, CORS, rate limiting
• 📊 MongoDB Integration - Mongoose ODM with proper indexing
• 🎯 Error Handling - Centralized error management
• 📝 API Documentation - Complete endpoint documentation

• Runtime: Node.js
• Framework: Express.js
• Database: MongoDB with Mongoose
• Authentication: JWT (JSON Web Tokens)
• Password Hashing: bcryptjs
• Validation: express-validator
• Security: helmet, cors, express-rate-limit

• Node.js (v14 or higher)
• MongoDB (local or cloud instance)
• npm or yarn

1. Clone the repository

   git clone <repository-url>
   cd node-auth-server

2. Install dependencies

   npm install

3. Environment Setup

   cp env.example .env

   Edit .env file with your configuration:

   PORT=3000
   NODE_ENV=development
   JWT_SECRET=your-super-secret-jwt-key-change-this-in-production
   JWT_EXPIRES_IN=24h
   MONGODB_URI=mongodb://localhost:27017/auth-server
   RATE_LIMIT_WINDOW_MS=900000
   RATE_LIMIT_MAX_REQUESTS=100

4. Start the server

   # Development mode
   npm run dev
   
   # Production mode
   npm start

The server will start on http://localhost:3000

curl -X POST http://localhost:3000/api/auth/register \
  -H "Content-Type: application/json" \
  -d '{
    "username": "john_doe",
    "email": "john@example.com",
    "password": "SecurePass123",
    "profile": {
      "firstName": "John",
      "lastName": "Doe"
    }
  }'

curl -X POST http://localhost:3000/api/auth/login \
  -H "Content-Type: application/json" \
  -d '{
    "email": "john@example.com",
    "password": "SecurePass123"
  }'

curl -X GET http://localhost:3000/api/auth/me \
  -H "Authorization: Bearer YOUR_JWT_TOKEN"

curl -X PUT http://localhost:3000/api/auth/profile \
  -H "Authorization: Bearer YOUR_JWT_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "profile": {
      "firstName": "John",
      "lastName": "Smith"
    }
  }'

curl -X GET http://localhost:3000/api/users \
  -H "Authorization: Bearer ADMIN_JWT_TOKEN"

• user: Basic user with profile management
• moderator: Can manage content and users (future feature)
• admin: Full access to all features including user management

• Password Hashing: Bcrypt with salt rounds
• JWT Tokens: Secure token-based authentication
• Input Validation: Comprehensive validation for all inputs
• Rate Limiting: Prevents abuse and DDoS attacks
• CORS Protection: Configurable cross-origin resource sharing
• Helmet: Security headers for Express
• Error Handling: Secure error responses without sensitive data

{
  username: String (unique, required),
  email: String (unique, required),
  password: String (hashed, required),
  role: String (enum: ['user', 'admin', 'moderator']),
  isActive: Boolean,
  lastLogin: Date,
  profile: {
    firstName: String,
    lastName: String,
    avatar: String
  },
  timestamps: true
}

The API returns consistent error responses:

{
  "success": false,
  "message": "Error description",
  "errors": [
    {
      "field": "email",
      "message": "Invalid email format",
      "value": "invalid-email"
    }
  ]
}

• npm start - Start production server
• npm run dev - Start development server with nodemon
• npm test - Run tests (when implemented)

├── config/
│   └── database.js          # Database configuration
├── controllers/
│   ├── authController.js    # Authentication logic
│   └── userController.js    # User management logic
├── middleware/
│   ├── auth.js             # Authentication middleware
│   ├── validation.js       # Input validation
│   └── errorHandler.js     # Error handling
├── models/
│   └── User.js             # User model
├── routes/
│   ├── auth.js             # Authentication routes
│   └── users.js            # User management routes
├── utils/
│   └── jwt.js              # JWT utilities
├── server.js               # Main server file
├── package.json            # Dependencies and scripts
└── README.md               # This file

1. Fork the repository
2. Create a feature branch
3. Make your changes
4. Add tests if applicable
5. Submit a pull request

MIT License - see LICENSE file for details

For support and questions, please open an issue in the repository.