Connecto Backend

🚀 A modern Node.js + TypeScript REST API for the Connecto social platform

1. 📁 Project Structure
2. 🔑 Authentication
3. 🔒 Protected Endpoints
4. 🧪 Validation
5. ⚙️ .env Configuration
6. 💻 Technologies Used
7. 🚀 Deployment
8. ©️ License
9. ✍️ Author

Below is the modular architecture of the backend project using TypeScript, Express, Mongoose, and clean architecture principles.

• POST /auth/signup – Create a new user
• POST /auth/login – Log in and receive JWT token

• JWT is stored in Authorization: Bearer <token> header
• Files access uses token in ?token=... query string (e.g., <img src="/api/v1/web-embed/proxy?proxyUrl=https%3A%2F%2Fgithub.com%2Ffiles%2Fuser%2Favatar%2Ffoo.png%3Ftoken%3D...&mode=full" />)
• Token settings (secret, expiry) are defined in .env

• GET /profile – Get current user's profile
• PATCH /profile – Update name, family name, or avatar (with file upload)
• PUT /password – Change password
• DELETE / – Delete current user

• POST / – Create new post (with optional file)
• GET / – Fetch all posts
• GET /:id – Get single post
• PATCH /:id/like – Like/unlike a post
• PATCH /:id – Update a post (and optionally update file)
• DELETE /:id – Delete a post
• POST /:id/comments – Add comment to a post
• GET /:id/comments – List comments on a post

• GET /:id – Get single comment
• PUT /:id – Update comment content
• DELETE /:id – Delete comment

• GET /user/avatar/:filename?token=... – Access user avatar (with token in URL)
• GET /post/:filename?token=... – Access post file (with token in URL)

All inputs are validated using Zod:

• Body (req.body)
• Params (req.params)
• Auth (req.auth)

If validation fails, the API responds with a 400 Bad Request and details.

Make sure to create a .env file based on the example in the .env.example file

A range of modern and robust technologies was used to develop Connecto, a secure and scalable social platform. Below is a detailed breakdown:

Technology	Description
	Node.js – Runtime for backend JavaScript execution.
	TypeScript – Superset of JavaScript adding type safety and better tooling.
	Express.js – Fast, unopinionated, minimalist web framework for Node.js.
	JWT (jsonwebtoken) – Secure user authentication via JSON Web Tokens.
	Multer – Middleware for handling multipart/form-data for file uploads.
	Zod – Type-safe schema validation for input data (Zod + TypeScript).
	Mongoose – Elegant MongoDB object modeling for Node.js.
	Winston – Logging library for professional, structured logging.
	ESLint – Pluggable linter for maintaining code quality and enforcing standards.
	Prettier – Opinionated code formatter to ensure consistent styling.
	Visual Studio Code – Primary code editor used for development.
	Postman – API platform used for building, testing and documenting RESTful endpoints.

This project is equipped with a streamlined development setup to ensure high code quality and consistency across environments.

• Nodemon – Automatically restarts the server on file changes during development.
• TypeScript – Enables static type checking for better reliability and maintainability.
• ESLint & Prettier – Enforces consistent code style and catches common errors.
• Environment Variables – Supports environment-specific configuration via .env files.

Run the following scripts to manage development tasks efficiently:

npm run dev             # Start the development server with Nodemon
npm run lint            # Lint all source files using ESLint
npm run lint:fix        # Automatically fix lint issues
npm run format          # Format all files using Prettier
npm run format:check    # Check if files are properly formatted (without modifying)

🔒 All Rights Reserved

This project and its entire source code are proprietary.
You are permitted to view the code only for informational or educational insight.

You may not:

• Reuse or copy any part of this codebase
• Modify, adapt, or build upon this project
• Distribute or make it publicly available
• Use it for personal, academic, or commercial projects

Unauthorized use will be considered a violation of copyright law.

For special permissions, contact the author at :

MasterCodeDevelop

Passionate Full-Stack Developer. I craft scalable web platforms, clean architectures, and intelligent backend systems. Always aiming for production-grade quality with well-documented, testable, and modular code. 🔗 Connect with me on GitHub 💡 Contributions, issues and feature requests are welcome!

Back to top