🎓 Course Management API

A full-stack RESTful API for course and user management with JWT authentication, built with Node.js, Express.js, and MongoDB.

✨ Features

🔐 Authentication System

• ✅ User Registration with email validation
• ✅ Secure Login with JWT tokens
• ✅ Password hashing with bcrypt
• ✅ Protected routes with middleware
• ✅ User profile management

📚 Course Management

• ✅ Full CRUD operations for courses
• ✅ Course listing with pagination
• ✅ Course enrollment system
• ✅ Public and protected endpoints

🛡️ Security & Best Practices

• ✅ JWT token authentication
• ✅ Password encryption (bcrypt)
• ✅ Input validation with express-validator
• ✅ CORS configuration
• ✅ Error handling with express-async-handler
• ✅ JSend response format

🚀 Quick Start

Prerequisites

• Node.js (v14 or higher)
• MongoDB Atlas account or local MongoDB
• Git

Installation

1. Clone the repository

   git clone https://github.com/MONOCODE-V/course-management-api.git
   cd course-management-api

2. Install dependencies

   npm install

3. Environment Setup

   # Copy environment template
   cp .env.example .env
   
   # Edit .env file with your configuration
   # MONGODB_URI=your_mongodb_connection_string
   # JWT_SECRET=your_super_secret_key
   # PORT=3000

4. Start the server

   # Development with auto-restart
   npm run dev
   
   # Production
   npm start

📚 API Documentation

Base URL

http://localhost:3000/api

🔓 Public Endpoints

User Registration

POST /auth/register
Content-Type: application/json

{
  "name": "John Doe",
  "email": "john@example.com",
  "password": "MyPassword123!",
  "age": 25
}

User Login

POST /auth/login
Content-Type: application/json

{
  "email": "john@example.com",
  "password": "MyPassword123!"
}

Get All Courses

GET /courses

🔒 Protected Endpoints

Requires Authorization header: Bearer <jwt_token>

Get User Profile

GET /profile/me
Authorization: Bearer <jwt_token>

Update User Profile

PATCH /profile/me
Authorization: Bearer <jwt_token>
Content-Type: application/json

{
  "name": "Updated Name",
  "email": "new@example.com"
}

Course Management

# Create Course
POST /courses
Authorization: Bearer <jwt_token>

# Update Course
PATCH /courses/:courseId
Authorization: Bearer <jwt_token>

# Delete Course
DELETE /courses/:courseId
Authorization: Bearer <jwt_token>

🏗️ Project Structure

course-management-api/
├── 📁 controllers/           # Route handlers
│   ├── auth.controllers.js   # Authentication logic
│   ├── course.controllers.js # Course CRUD operations
│   └── user.profile.controllers.js # Profile management
├── 📁 data/                  # Database schemas
│   ├── coursesSchema.js      # Course model
│   └── userSchema.js         # User model
├── 📁 middleware/            # Custom middleware
│   └── auth.js              # JWT authentication
├── 📁 routes/                # API routes
│   ├── authRoutes.js        # Auth endpoints
│   ├── courses.route.js     # Course endpoints
│   └── profileRoutes.js     # Profile endpoints
├── 📄 index.js               # Server entry point
├── 📄 package.json           # Dependencies
├── 📄 .env.example           # Environment template
└── 📄 README.md             # This file

🗄️ Database Schema

User Model

{
  name: String,           // Required, 2-50 characters
  email: String,          // Required, unique, validated
  password: String,       // Required, hashed with bcrypt
  age: Number,           // Required, 13-120
  role: String,          // Enum: ['user', 'admin', 'moderator']
  enrolledCourses: [ObjectId], // References to Course
  createdAt: Date        // Auto-generated
}

Course Model

{
  title: String,         // Required
  price: Number,         // Required, positive
  description: String,   // Optional
  instructor: String,    // Required
  duration: Number,      // In hours
  level: String,         // Enum: ['beginner', 'intermediate', 'advanced']
  createdAt: Date       // Auto-generated
}

🧪 Testing with Thunder Client / Postman

1. Register a New User

POST http://localhost:3000/api/auth/register
Content-Type: application/json

{
  "name": "Test User",
  "email": "test@example.com", 
  "password": "TestPassword123!",
  "age": 25
}

2. Login and Get Token

POST http://localhost:3000/api/auth/login
Content-Type: application/json

{
  "email": "test@example.com",
  "password": "TestPassword123!"
}

3. Access Protected Route

GET http://localhost:3000/api/profile/me
Authorization: Bearer <your_jwt_token_from_login>

🔧 Available Scripts

# Start development server with auto-reload
npm run dev

# Start production server
npm start

# Install dependencies
npm install

🌍 Environment Variables

Create a .env file in the root directory:

# Database
MONGODB_URI=mongodb+srv://username:password@cluster.mongodb.net/dbname

# JWT Configuration
JWT_SECRET=your-super-secret-jwt-key-make-it-very-long-and-random
JWT_EXPIRES_IN=7d

# Server Configuration
PORT=3000
NODE_ENV=development

# Password Hashing
BCRYPT_ROUNDS=12

📦 Dependencies

Production

• express - Web framework for Node.js
• mongoose - MongoDB object modeling
• jsonwebtoken - JWT token generation and verification
• bcryptjs - Password hashing
• express-validator - Input validation middleware
• express-async-handler - Async error handling
• cors - Cross-Origin Resource Sharing
• dotenv - Environment variable management

Development

• nodemon - Development server with auto-reload

🔐 Security Features

• Password Hashing: Uses bcrypt with configurable rounds
• JWT Authentication: Stateless token-based auth
• Input Validation: Server-side validation for all inputs
• CORS Protection: Configurable cross-origin requests
• Error Handling: Centralized error management
• Environment Variables: Sensitive data protection

🤝 Contributing

1. Fork the repository
2. Create your feature branch (git checkout -b feature/AmazingFeature)
3. Commit your changes (git commit -m 'Add some AmazingFeature')
4. Push to the branch (git push origin feature/AmazingFeature)
5. Open a Pull Request

📄 License

This project is licensed under the MIT License - see the LICENSE file for details.

👨‍💻 Author

MONOCODE-V

• GitHub: @MONOCODE-V
• Email: minamagdypro@gmail.com

🙏 Acknowledgments

• Express.js team for the amazing framework
• MongoDB team for the database solution
• JWT.io for token authentication standards
• The Node.js community for continuous support

---

⭐ Star this repository if it helped you!