davellanedam/node-express-mongodb-jwt-rest-api-skeleton
Node Express Mongodb Jwt Rest Api Skeleton
This project is a starter template for building secure web services and REST application backends using Node.js, Express, MongoDB, and JSON Web Tokens. It provides a foundation for server-side development, incorporating document mapping for database integration, cryptographic token authentication, and role-based access control.
The system features user account administration, automated database seeding and cleanup scripts, dynamic file-based routing, and environment-based configuration management. Security features include brute-force protection through failed login tracking and request activity logging that records client IP addresses, browser details, and location data during login events.
Additional capabilities cover data caching using Redis, automated endpoint testing, localized email delivery through external transport providers, API documentation generation, and client language detection from incoming request headers.
Features
- Token-Based Authentication - Verifies user identity by issuing and validating cryptographic tokens on incoming requests.
- REST API Backends - Provides a secure REST API backend built with Express and MongoDB to handle client requests.
- Database Connection Managers - Establishes and manages persistent connections to MongoDB document stores.
- MongoDB Integrations - Connects to MongoDB document databases to persist application records and manage schemas.
- Object-Document Mappers - Establishes database connections and structures persistence using an object document mapper.
- Boilerplates - Serves as a ready-to-use project starter with Mongoose ODM and role-based access control preconfigured.
- Brute Force Protections - Tracks failed login attempts and temporarily blocks suspicious IPs to protect accounts from brute-force attacks.
- JSON Web Tokens - Issues and validates signed JSON Web Tokens to authenticate users and secure protected routes.
- Role-Based Access Control - Enforces role-based permissions on incoming requests to restrict access to sensitive administrative actions.
- Token Authentication - Secures backend endpoints by issuing, validating, and refreshing signed JSON web tokens.
- File-System Based Routing - Automatically discovers and registers route controllers and models from designated file paths.
- Node.js API Frameworks - Organizes server-side routing and middleware using the Node.js Express framework.
- RESTful Endpoints - Initializes a structured web server and routing framework for handling HTTP requests.
- Transactional Email Notifications - Triggers automated transactional emails for system events such as account registration and alerts.
- Application Data Caches - Stores frequently accessed data in an in-memory caching layer to reduce database load and speed up response times.
- Paginated Results - Splits large dataset queries into manageable pages for optimal transfer and rendering.
- Redis Caching Layers - Utilizes Redis as an in-memory data cache to accelerate lookup queries.
- Multi-Environment Configuration Systems - Adjusts application configurations automatically for development and production stages.
- Access and Refresh Token Issuances - Issues new session tokens using a refresh mechanism to maintain continuous authentication.
- User Profile Management - Provides email registration, profile management, and administrator user listings.
- User Role Management - Provides user account administration and profile management with assigned role permissions.
- Environment-Based Behavior - Switches application settings and runtime behaviors based on deployment environments.
- API Endpoint Testing - Executes automated test suites against API endpoints to verify functional correctness and prevent regressions.
