🚀 Social Media Platform Backend

A robust and scalable RESTful API backend for a social media platform built with Node.js, Express, and MongoDB. This backend supports user authentication, tweet management, likes, and real-time content delivery with advanced features like OTP verification, image uploads, and comprehensive user management.

✨ Features

🔐 Authentication & Security

• JWT-based Authentication with access and refresh tokens
• OTP Email Verification for new accounts
• Password Management with bcrypt encryption
• Rate Limiting to prevent abuse (100 requests per 15 minutes)
• Cookie-based Session Management
• CORS Configuration for secure cross-origin requests

👤 User Management

• User registration with email verification
• Login/Logout functionality
• Profile management with avatar uploads
• Password change capability
• Token refresh mechanism
• Get current user details

📝 Tweet Features

• Create tweets with text and optional images
• Update existing tweets
• Delete tweets
• View all tweets (public feed)
• View user-specific tweets
• Image optimization via Cloudinary

❤️ Engagement

• Like/Unlike tweets
• Track likes per tweet
• User engagement analytics

📊 Dashboard & Analytics

• Get all tweets with user information
• Get user-specific content
• Optional authentication for public content viewing

🛠️ Tech Stack

• Runtime: Node.js
• Framework: Express.js 5.x
• Database: MongoDB with Mongoose ODM
• Authentication: JWT (JSON Web Tokens)
• Image Storage: Cloudinary
• Email Service: Resend / Nodemailer / EmailJS
• File Upload: Multer
• Security: bcrypt, express-rate-limit, CORS, compression

📁 Project Structure

src/
├── app.js                      # Express app configuration
├── index.js                    # Entry point
├── constants.js                # Application constants
├── controllers/                # Request handlers
│   ├── user.controller.js      # User operations
│   ├── tweet.controller.js     # Tweet CRUD operations
│   ├── like.controller.js      # Like/Unlike operations
│   ├── dashboard.controller.js # Feed & analytics
│   └── healthcheck.controller.js
├── models/                     # Database schemas
│   ├── user.model.js          # User schema with auth methods
│   ├── tweet.model.js         # Tweet schema
│   ├── like.model.js          # Like relationships
│   └── follower.model.js      # Follower relationships
├── routes/                    # API routes
│   ├── user.routes.js
│   ├── tweet.routes.js
│   ├── like.routes.js
│   ├── dashboard.routes.js
│   └── healthcheck.routes.js
├── middlewares/               # Custom middleware
│   ├── auth.middleware.js     # JWT verification
│   ├── optionalAuth.middleware.js
│   ├── multer.middleware.js   # File upload handling
│   └── errorHandler.middleware.js
├── utils/                     # Helper functions
│   ├── ApiResponse.js         # Standardized responses
│   ├── ApiError.js           # Custom error class
│   ├── asyncHandler.js       # Async error wrapper
│   ├── cloudinary.js         # Image upload service
│   ├── deleteFromCloudinary.js
│   ├── getOptimizedUrl.js
│   └── sendOTP.js            # Email OTP service
└── db/
    └── index.js              # Database connection

API Endpoints

🔐 Authentication & User Routes

Base URL: /api/v1/users

Method	Endpoint	Description	Auth Required
POST	/create-account	Register a new user	❌
POST	/login	User login	❌
POST	/verify-otp	Verify email with OTP	❌
POST	/r/otp	Request new OTP	❌
GET	/logout	User logout	✅
GET	/me	Get current user details	✅
GET	/new-access-token	Refresh access token	❌
PATCH	/u/avatar	Update user avatar	✅
PATCH	/c/password	Change password	❌

📝 Tweet Routes

Base URL: /api/v1/tweet

Method	Endpoint	Description	Auth Required
POST	/t/upload	Create a new tweet	✅
PATCH	/t/update/:tweetId	Update tweet	✅
DELETE	/t/delete/:tweetId	Delete tweet	✅

❤️ Like Routes

Base URL: /api/v1/like

Method	Endpoint	Description	Auth Required
GET	/tweet/:tweetId	Toggle like on tweet	✅

📊 Dashboard Routes

Base URL: /api/v1/home

Method	Endpoint	Description	Auth Required
GET	/all-content	Get all tweets (feed)	Optional
GET	/user-content/:username	Get user's tweets	Optional

🏥 Health Check

Base URL: /api/v1/healthcheck

Method	Endpoint	Description	Auth Required
GET	/	Server health status	❌

🔒 Authentication Flow

1. Register: User creates account → OTP sent to email
2. Verify: User enters OTP → Account activated
3. Login: User logs in → Receives access & refresh tokens
4. Protected Routes: Access token required in cookies
5. Token Refresh: Refresh token generates new access token
6. Logout: Clears tokens from cookies

📝 Request/Response Examples

Create Account

POST /api/v1/users/create-account
Content-Type: application/json

{
  "username": "johndoe",
  "fullName": "John Doe",
  "email": "john@example.com",
  "password": "SecurePass123"
}

Upload Tweet

POST /api/v1/tweet/t/upload
Content-Type: multipart/form-data
Authorization: Bearer <token>

{
  "content": "Hello World! This is my first tweet",
  "image": <file>
}

Get All Tweets

GET /api/v1/home/all-content

🛡️ Security Features

• Password Hashing: bcrypt with 10 salt rounds
• JWT Tokens: Separate access (1d) and refresh tokens (10d)
• Rate Limiting: 100 requests per 15 minutes per IP
• HTTP-only Cookies: Secure token storage
• Data Validation: Required field validation
• Error Handling: Centralized error middleware
• CORS Protection: Configurable origin whitelist
• File Upload Limits: 16kb JSON payload limit

Dependencies

Core Dependencies

• express - Web framework
• mongoose - MongoDB ODM
• jsonwebtoken - JWT authentication
• bcrypt - Password hashing
• multer - File upload handling
• cloudinary - Image storage
• cookie-parser - Cookie parsing
• cors - CORS middleware
• express-rate-limit - Rate limiting
• compression - Response compression
• resend - Email service

Dev Dependencies

• nodemon - Development auto-reload
• prettier - Code formatting

📄 License

Copyright (c) 2025 Pritesh Thorat - All Rights Reserved. This code is available for viewing and educational purposes only. See the LICENSE file for details.

👨‍💻 Author

Pritesh Thorat

• GitHub: @PriteshThorat
• Repository: Social-Media-Platform-Backend

🐛 Bug Reports & Issues

Please report bugs and issues on the GitHub Issues page.

---

Made with ❤️ by Pritesh Thorat