⚡ Dynamic Node.js E-Commerce REST API Engine 🚀 | Express.js ⚡, MongoDB Atlas 🗄️, Mongoose 🍃 & JWT Auth 🔐 | Scalable MVC Architecture 🏛️ | Secured Auth Middleware 🛡️, Product, User & Review CRUD 🛍️👤⭐ & .env Protection 🗝️ | High-Performance Scalability 📈💥

• Backend Architecture: Modular RESTful APIs engineered with Node.js & Express.js, structured using Express Routers, custom middleware error handlers (asyncErrorHandler), and controller-based business logic.
• Database Persistence & Data Modeling: Scalable document modeling via MongoDB & Mongoose, featuring schema validations, sub-documents (reviews & user roles), and optimized queries (findByIdAndUpdate array updates, returnDocument standards).
• Security & Error Handling: Robust exception management using global handlers for uncaught exceptions, unhandled promise rejections, and custom error middleware.
• Environment & Configuration Setup: Centralized setup using dotenv for secret and environment management, proper load ordering, and clean project architecture.
• Software Architecture: Strictly structured following the MVC (Model-View-Controller) pattern—separating Mongoose Data Models, Express Route Handlers, and Controller Business Logic for high maintainability and scalability.

This workspace contains a production-ready, full-stack E-Commerce REST API backend featuring modular architecture and robust data handling:

• 🛒 E-Commerce REST API: Complete backend infrastructure for products, orders, user authentication, and system administration.
• ⚙️ Advanced CRUD & Sub-Document Operations: Complete lifecycle management for products and reviews, including nested array updates via $pull and automatic rating recalculations.
• 🛡️ Role-Based Access Control: Secure user management and admin privilege routing for user roles and product modifications.
• ⚡ Centralized Error Handling: Global error catching for async controllers, uncaught exceptions, unhandled promise rejections, and custom error middleware.

• 🏗️ Modular REST API Architecture – Scalable Node.js & Express.js backend engineered with RESTful principles and clean route-controller separation.
• 🏛️ MVC Design Pattern – Strict separation of concerns organizing data structure in Models, endpoints in Routes, and core application logic in Controllers.
• ⚙️ Advanced Database CRUD & Array Operations – Complete lifecycle management for products, users, and reviews, utilizing Mongoose sub-document filtering and dynamic rating recalculations.
• 🛡️ Role-Based Access Control (RBAC) – Multi-role authorization layers restricting sensitive administrative endpoints and user operations.
• 🗄️ MongoDB & Mongoose Schema Validation – Persistent document storage featuring custom field validations, schema constraints, and modern Mongoose query standards (returnDocument).
• ⚡ Centralized Global Error Handling – Production-grade error middleware handling asynchronous route errors (asyncErrorHandler), missing resource exceptions, unhandled promise rejections, and uncaught exceptions.
• ⚙️ Centralized Environment Configuration – Secure management of sensitive backend credentials, database URIs, and server ports using dotenv.

Generated: 8/12/2026, 10:41:29 AM

Root Path: workspace\e-commerce-Backend

├── 📁 backend
│   ├── 📁 config
│   ├── 📁 controllers
│   │   ├── 📄 productController.js
│   │   └── 📄 userController.js
│   ├── 📁 middlewares
│   │   ├── 📄 asyncErrorHandler.js
│   │   ├── 📄 auth.js
│   │   └── 📄 error.js
│   ├── 📁 models
│   │   ├── 📄 productModel.js
│   │   └── 📄 userModel.js
│   ├── 📁 routes
│   │   ├── 📄 productRoute.js
│   │   └── 📄 userRoute.js
│   ├── 📁 utils
│   │   ├── 📄 ApiFeatures.js
│   │   ├── 📄 Errorhandler.js
│   │   ├── 📄 JWTToken.js
│   │   └── 📄 sendEmail.js
│   ├── 📄 app.js
│   ├── 📄 connectDB.js
│   └── 📄 server.js
├── 📁 frontend
│   └── ⚙️ .gitkeep
├── ⚙️ .gitignore
├── 📝 README.md
├── ⚙️ package-lock.json
└── ⚙️ package.json

• Node.js (v16 or higher)
• npm package manager
• Basic knowledge of JavaScript & MongoDB

Download and install the LTS version from Node.js Official Site. Verify installation in your terminal:

node -v
npm -v

1. Download MongoDB Community Server from MongoDB Download Center.
2. Download MongoDB Shell (mongosh) to run CLI database operations.
3. Start the local server daemon:

# Verify connection using mongosh CLI
mongosh

Initialize your Node project inside any project directory:

npm init

package name: (name)

version: (1.0.0)

description: may add ​ entry point: (app.js)​

test command: just enter​

git repository: (https://github.com/username/repo_name.git)

keywords: may add

author: may add

license: (ISC) may be MIT for open source

type: (commonjs) recommended module

Is this OK? (yes)

If you want to pull this project and run it again locally, simply execute these commands:

# Navigate to the project folder
cd Project_dir

# create node_modules folder by running this command  
npm i

# Start the local development server
npm start  # for deployment 
npm run dev # for development

To enable modern ES6 import/export syntax instead of require(), open package.json and add "type": "module":

{
  "name": "node",
  "version": "1.0.0",
  "bugs": {
    "url": "https://github.com/username/repo/issues"
  },
  "repository": {
    "type": "git",
    "url": "git+https://github.com/username/repo.git"
  },
  "license": "ISC",
  "author": "",
  "type": "commonjs",
  "main": "app.js",
  "scripts": {
    "test": "echo \"Error: no test specified\" && exit 1",
    "start": "node app.js" // add manually write "nodemon index.js" if installed
  }
}

Run this command inside your project directory to install npm pakages in pakages.json file:

npm i express
npm i mongoose
npm i nodemon
npm i dotenv
npm i jsonwebtoken
npm i nodemailer
npm i bcryptjs
npm i validator
npm i cookie-parser
npm i body-parser

It automatically Create package.json if not exists. Like

{
  "name": "pakage name",
  "version": "1.0.0",
  "description": "Something",
  "keywords": [
    "keywords"
  ],
  "homepage": "https://github.com/github.com/username#readme",
  "bugs": {
    "url": "https://github.com/github.com/username/issues"
  },
  "repository": {
    "type": "git",
    "url": "git+https://github.com/github.com/username.git"
  },
  "author": "Author",
  "type": "module",
   "main": "backend/server.js",
  "scripts": {
    "test": "echo \"Error: no test specified\" && exit 1",
    "start": "node backend/server.js",
    "dev": "nodemon backend/server.js"
  },
  "dependencies": {
    "bcryptjs": "^3.0.3",
    "body-parser": "^2.3.0",
    "cookie-parser": "^1.4.7",
    "dotenv": "^17.4.2",
    "express": "^5.2.1",
    "jsonwebtoken": "^9.0.3",
    "mongoose": "^9.9.1",
    "nodemailer": "^9.0.5",
    "nodemon": "^3.1.14",
    "validator": "^13.15.35"
  }
}

Note: Install packages when needed

A production-ready Node.js & Express RESTful API architecture following the MVC (Model-View-Controller) pattern with JWT Authentication, Role-Based Access Control (RBAC), and Mongoose sub-document query handling.

# Clone the repository
git clone [https://github.com/YOUR_USERNAME/YOUR_REPO_NAME.git](https://github.com/YOUR_USERNAME/YOUR_REPO_NAME.git)

# Navigate to backend directory
cd backend

# Install dependencies
npm install

# Configure Environment Variables (.env)
# Create a .env file in the config/ directory with:
PORT=5000
DB_URI=mongodb://localhost:27017/ecommerce
JWT_SECRET=YOUR_JWT_SECRET_KEY
JWT_EXPIRE=nd
COOKIE_EXPIRE=n
SMPT_HOST=host
SMPT_PORT=port
SMPT_SERVICE=service
SMPT_MAIL=your_email@gmail.com
SMPT_PASSWORD=your_app_password

Base Route: protocol://host:port/api/v1

• Review Sub-Document Deletion (_id Mismatch): When deleting a review via DELETE /api/v1/reviews?productId=P_ID&id=R_ID, ensure the id query parameter corresponds to the Review Sub-Document _id, not the User _id. Passing the User ID will cause Mongoose filter operations to skip without mutating the database array.

• Express.js Documentation — (Official guide for routing, controllers, and Express middleware)
• Mongoose Documentation — (Guides for MongoDB schema modeling, queries, and aggregation)
• JSON Web Token (JWT) Guide — (Official docs for token-based authentication and security)
• Bcryptjs Repository — (Documentation for hashing passwords securely in Node.js)
• Nodemailer Documentation — (Official setup guide for sending emails and password resets)
• Cookie-Parser Repository — (Guide for parsing HTTP request cookies in Express)
• Validator.js Documentation — (Reference for string sanitization and custom schema validation)
• Postman Learning Center — (API testing, collection management, and request debugging)
• W3Schools Web Tutorials — (Comprehensive tutorials for JavaScript, Node.js, Express, and databases)

• ✅ MVC Architecture – Structuring backend applications using Models, Express Routes, and Controller business logic
• ✅ Authentication & JWT – Issuing, signing, and verifying JSON Web Tokens (JWT) for secure user sessions
• ✅ Password Security & Hashing – Hashing user credentials securely using bcryptjs before database persistence
• ✅ Cookie Management – Storing and parsing HTTP-only cookies safely with cookie-parser for authentication state
• ✅ Role-Based Access Control (RBAC) – Dynamic route protection and administrative privilege checks based on user roles
• ✅ MongoDB & Mongoose Schema Design – Managing schemas, data validation, sub-documents (reviews), and modern Mongoose query standards
• ✅ Sub-Document & Array Operations – Atomic array updates ($pull) and dynamic calculation of ratings and review counts
• ✅ Express Middleware Pipeline – Request body parsing (json, urlencoded), error handling middleware, and protected route guards
• ✅ Asynchronous Error Handling – Managing async exceptions cleanly with custom error handlers (asyncErrorHandler) and custom error classes
• ✅ Notification Services – Integrated email workflows using Nodemailer for user notifications and password resets
• ✅ Environment Vault & Tooling – Managing secret variables via dotenv and developer workflows with nodemon

MehmoodCoder

• 🔗 GitHub: https://github.com/MehmoodCoder
• 🌐 Portfolio: My Portfolio Link

This project is open-source and available under the MIT License.

Contributions are welcome! If you'd like to improve the API, add new features, or optimize database queries, please feel free to submit a Pull Request.

1. Fork the repository
2. Create your feature branch (git checkout -b feature/amazing-feature)
3. Commit your changes (git commit -m 'Add amazing feature')
4. Push to the branch (git push origin feature/amazing-feature)
5. Open a Pull Request

• ✨ Modular REST API Architecture: Initialized core Node.js & Express.js backend services structured around the MVC pattern.
• 🔐 Authentication & Authorization: Implemented JWT-based security, password hashing with bcryptjs, and role-based access control middleware.
• ⚙️ Advanced CRUD Systems & Array Operations: Engineered complete backend routes for product management, user profiles, and sub-document review handling (filters).
• ⚡ Global Error Handling: Integrated custom async error handler and global error middleware for robust exception management.
• 🗄️ Database Persistence: Configured Mongoose schema designs with strict validation rules and cloud MongoDB Atlas connectivity.
• 🚀 Production-Ready Baseline: Configured environment isolation via dotenv, cookie-parser session management, and serverless deployment protocols.