mern-template-tool 1.0.0

package/templates/server/routes/adminRoutes.js

@@ -0,0 +1,138 @@
+const express = require('express');
+const router = express.Router();
+const bcrypt = require('bcryptjs');
+const User = require('../models/User');
+const Resource = require('../models/Resource');
+const { sessionAuth } = require('../middleware/sessionAuthMiddleware');
+
+// GET /admin/login - Render Admin Login Page
+router.get('/login', (req, res) => {
+  if (req.session && req.session.user && req.session.user.role === 'admin') {
+    return res.redirect('/admin/dashboard');
+  }
+  res.render('login', {
+    error: req.query.error || null,
+    success: req.query.success || null,
+  });
+});
+
+// POST /admin/login - Authenticate Admin User and establish Session
+router.post('/login', async (req, res, next) => {
+  try {
+    const { email, password } = req.body;
+
+    if (!email || !password) {
+      return res.render('login', {
+        error: 'Please provide both email and password.',
+        success: null,
+      });
+    }
+
+    const user = await User.findOne({ email: email.toLowerCase() });
+
+    if (!user) {
+      return res.render('login', {
+        error: 'Invalid admin credentials.',
+        success: null,
+      });
+    }
+
+    if (user.role !== 'admin') {
+      return res.render('login', {
+        error: 'Access denied: Admin role required.',
+        success: null,
+      });
+    }
+
+    if (!user.isActive) {
+      return res.render('login', {
+        error: 'This admin account has been deactivated.',
+        success: null,
+      });
+    }
+
+    const isMatch = await bcrypt.compare(password, user.password);
+    if (!isMatch) {
+      return res.render('login', {
+        error: 'Invalid admin credentials.',
+        success: null,
+      });
+    }
+
+    // Save user info in express-session
+    req.session.user = {
+      id: user._id,
+      name: user.name,
+      email: user.email,
+      role: user.role,
+    };
+
+    res.redirect('/admin/dashboard');
+  } catch (error) {
+    next(error);
+  }
+});
+
+// POST /admin/logout - Destroy Session
+router.post('/logout', (req, res) => {
+  req.session.destroy((err) => {
+    if (err) {
+      console.error('Session destroy error:', err);
+    }
+    res.redirect('/admin/login?success=Logged%20out%20successfully');
+  });
+});
+
+// GET /admin/dashboard - Render Protected Admin Dashboard
+router.get('/dashboard', sessionAuth, async (req, res, next) => {
+  try {
+    const users = await User.find().sort({ createdAt: -1 });
+    const resources = await Resource.find()
+      .populate('createdBy', 'name email')
+      .sort({ createdAt: -1 });
+
+    const totalStudents = users.filter((u) => u.role === 'student').length;
+    const totalAdmins = users.filter((u) => u.role === 'admin').length;
+
+    res.render('dashboard', {
+      adminUser: req.session.user,
+      users,
+      resources,
+      stats: {
+        totalUsers: users.length,
+        totalStudents,
+        totalAdmins,
+        totalResources: resources.length,
+      },
+      message: req.query.message || null,
+    });
+  } catch (error) {
+    next(error);
+  }
+});
+
+// POST /admin/users/:id/toggle - Toggle user active status (demonstrates admin action in EJS)
+router.post('/users/:id/toggle', sessionAuth, async (req, res, next) => {
+  try {
+    const user = await User.findById(req.params.id);
+    if (user) {
+      user.isActive = !user.isActive;
+      await user.save();
+    }
+    res.redirect('/admin/dashboard?message=User%20status%20updated');
+  } catch (error) {
+    next(error);
+  }
+});
+
+// POST /admin/resources/:id/delete - Admin delete resource
+router.post('/resources/:id/delete', sessionAuth, async (req, res, next) => {
+  try {
+    await Resource.findByIdAndDelete(req.params.id);
+    res.redirect('/admin/dashboard?message=Resource%20deleted%20by%20admin');
+  } catch (error) {
+    next(error);
+  }
+});
+
+module.exports = router;

package/templates/server/routes/authRoutes.js

@@ -0,0 +1,21 @@
+const express = require('express');
+const router = express.Router();
+const {
+  registerUser,
+  loginUser,
+  getMe,
+} = require('../controllers/authController');
+const { protect } = require('../middleware/authMiddleware');
+const {
+  registerValidationRules,
+  loginValidationRules,
+} = require('../middleware/validateMiddleware');
+
+// Public routes
+router.post('/register', registerValidationRules, registerUser);
+router.post('/login', loginValidationRules, loginUser);
+
+// Protected routes
+router.get('/me', protect, getMe);
+
+module.exports = router;

package/templates/server/routes/resourceRoutes.js

@@ -0,0 +1,27 @@
+const express = require('express');
+const router = express.Router();
+const {
+  getResources,
+  getResourceById,
+  createResource,
+  updateResource,
+  deleteResource,
+  downloadResourceFile,
+} = require('../controllers/resourceController');
+const { protect } = require('../middleware/authMiddleware');
+const upload = require('../middleware/uploadMiddleware');
+const {
+  resourceValidationRules,
+} = require('../middleware/validateMiddleware');
+
+// Public read routes
+router.get('/', getResources);
+router.get('/:id', getResourceById);
+router.get('/:id/download', downloadResourceFile);
+
+// Protected mutation routes (with optional Multer file upload)
+router.post('/', protect, upload.single('file'), resourceValidationRules, createResource);
+router.put('/:id', protect, upload.single('file'), updateResource);
+router.delete('/:id', protect, deleteResource);
+
+module.exports = router;

package/templates/server/server.js

@@ -0,0 +1,89 @@
+const express = require('express');
+const path = require('path');
+const dotenv = require('dotenv');
+const cors = require('cors');
+const session = require('express-session');
+const connectDB = require('./config/db');
+const { notFound, errorHandler } = require('./middleware/errorMiddleware');
+
+// Load environment variables
+dotenv.config();
+
+// Connect to MongoDB
+connectDB();
+
+const app = express();
+
+// Body Parser Middleware
+app.use(express.json());
+app.use(express.urlencoded({ extended: true }));
+
+// CORS configuration (allow client requests)
+app.use(
+  cors({
+    origin: '*',
+    credentials: true,
+  })
+);
+
+// Express Session Configuration (For EJS Admin Portal)
+app.use(
+  session({
+    secret: process.env.SESSION_SECRET || 'mern_exam_session_secret_key_12345',
+    resave: false,
+    saveUninitialized: false,
+    cookie: {
+      httpOnly: true,
+      maxAge: 24 * 60 * 60 * 1000, // 1 day
+    },
+  })
+);
+
+// EJS View Engine Setup
+app.set('view engine', 'ejs');
+app.set('views', path.join(__dirname, 'views'));
+
+// Static Folders
+app.use('/uploads', express.static(path.join(__dirname, 'uploads')));
+app.use(express.static(path.join(__dirname, 'public')));
+
+// API Routes
+app.use('/api/auth', require('./routes/authRoutes'));
+app.use('/api/resources', require('./routes/resourceRoutes'));
+
+// EJS Admin Routes
+app.use('/admin', require('./routes/adminRoutes'));
+
+// Health check route
+app.get('/api/health', (req, res) => {
+  res.status(200).json({
+    status: 'ok',
+    timestamp: new Date().toISOString(),
+    uptime: process.uptime(),
+  });
+});
+
+// Root route redirect / info
+app.get('/', (req, res) => {
+  res.send(`
+    <div style="font-family: sans-serif; padding: 2rem; max-width: 600px; margin: 0 auto; text-align: center;">
+      <h2>🚀 MERN Template Backend Server Running</h2>
+      <p style="color: #64748b; margin: 1rem 0;">Exam-ready architecture with JWT API & EJS Admin portal.</p>
+      <div style="display: flex; gap: 1rem; justify-content: center; margin-top: 1.5rem;">
+        <a href="/admin/login" style="padding: 0.6rem 1.2rem; background: #4f46e5; color: white; text-decoration: none; border-radius: 6px; font-weight: 500;">Admin EJS Panel</a>
+        <a href="/api/health" style="padding: 0.6rem 1.2rem; background: #0f172a; color: white; text-decoration: none; border-radius: 6px; font-weight: 500;">API Health</a>
+      </div>
+    </div>
+  `);
+});
+
+// Error handling middleware
+app.use(notFound);
+app.use(errorHandler);
+
+const PORT = process.env.PORT || 5000;
+
+app.listen(PORT, () => {
+  console.log(`[Express Server] Server running on http://localhost:${PORT}`);
+  console.log(`[EJS Admin Portal] Admin portal at http://localhost:${PORT}/admin/login`);
+});

package/templates/server/utils/jwt.js

@@ -0,0 +1,18 @@
+const jwt = require('jsonwebtoken');
+
+const generateToken = (user) => {
+  return jwt.sign(
+    {
+      id: user._id,
+      role: user.role,
+    },
+    process.env.JWT_SECRET || 'fallback_jwt_secret_for_exam',
+    {
+      expiresIn: '1d',
+    }
+  );
+};
+
+module.exports = {
+  generateToken,
+};

package/templates/server/views/dashboard.ejs

@@ -0,0 +1,128 @@
+<%- include('partials/header', { title: 'Admin Dashboard - MERN Exam' }) %>
+
+<h2 style="margin-bottom: 1.5rem;">System Overview & Statistics</h2>
+
+<% if (typeof message !== 'undefined' && message) { %>
+  <div class="alert alert-success"><%= message %></div>
+<% } %>
+
+<!-- Stats Grid -->
+<div style="display: grid; grid-template-columns: repeat(auto-fit, minmax(200px, 1fr)); gap: 1rem; margin-bottom: 2rem;">
+  <div class="card" style="margin-bottom: 0; text-align: center;">
+    <p style="color: var(--text-muted); font-size: 0.85rem;">Total Users</p>
+    <h3 style="font-size: 1.8rem; color: var(--primary);"><%= stats.totalUsers %></h3>
+  </div>
+  <div class="card" style="margin-bottom: 0; text-align: center;">
+    <p style="color: var(--text-muted); font-size: 0.85rem;">Students</p>
+    <h3 style="font-size: 1.8rem; color: #10b981;"><%= stats.totalStudents %></h3>
+  </div>
+  <div class="card" style="margin-bottom: 0; text-align: center;">
+    <p style="color: var(--text-muted); font-size: 0.85rem;">Admins</p>
+    <h3 style="font-size: 1.8rem; color: #6366f1;"><%= stats.totalAdmins %></h3>
+  </div>
+  <div class="card" style="margin-bottom: 0; text-align: center;">
+    <p style="color: var(--text-muted); font-size: 0.85rem;">Total Resources</p>
+    <h3 style="font-size: 1.8rem; color: #f59e0b;"><%= stats.totalResources %></h3>
+  </div>
+</div>
+
+<!-- Users Management Table -->
+<div class="card">
+  <h3>Registered Users</h3>
+  <p style="color: var(--text-muted); font-size: 0.85rem; margin-bottom: 1rem;">
+    Demonstrates EJS looping, conditionals, and server-side state toggling.
+  </p>
+  <table>
+    <thead>
+      <tr>
+        <th>Name</th>
+        <th>Email</th>
+        <th>Role</th>
+        <th>Status</th>
+        <th>Joined</th>
+        <th>Actions</th>
+      </tr>
+    </thead>
+    <tbody>
+      <% if (users.length === 0) { %>
+        <tr>
+          <td colspan="6" style="text-align: center; color: var(--text-muted);">No users registered yet.</td>
+        </tr>
+      <% } else { %>
+        <% users.forEach(function(u) { %>
+          <tr>
+            <td><strong><%= u.name %></strong></td>
+            <td><%= u.email %></td>
+            <td>
+              <span class="badge <%= u.role === 'admin' ? 'badge-admin' : 'badge-student' %>">
+                <%= u.role %>
+              </span>
+            </td>
+            <td>
+              <span class="badge <%= u.isActive ? 'badge-active' : 'badge-inactive' %>">
+                <%= u.isActive ? 'Active' : 'Inactive' %>
+              </span>
+            </td>
+            <td><%= new Date(u.createdAt).toLocaleDateString() %></td>
+            <td>
+              <form action="/admin/users/<%= u._id %>/toggle" method="POST" style="display:inline;">
+                <button type="submit" class="btn btn-sm <%= u.isActive ? 'btn-danger' : 'btn-primary' %>">
+                  <%= u.isActive ? 'Deactivate' : 'Activate' %>
+                </button>
+              </form>
+            </td>
+          </tr>
+        <% }); %>
+      <% } %>
+    </tbody>
+  </table>
+</div>
+
+<!-- Resources Table -->
+<div class="card">
+  <h3>Created Resources</h3>
+  <table>
+    <thead>
+      <tr>
+        <th>Title</th>
+        <th>Category</th>
+        <th>Created By</th>
+        <th>File Attachment</th>
+        <th>Created At</th>
+        <th>Actions</th>
+      </tr>
+    </thead>
+    <tbody>
+      <% if (resources.length === 0) { %>
+        <tr>
+          <td colspan="6" style="text-align: center; color: var(--text-muted);">No resources found.</td>
+        </tr>
+      <% } else { %>
+        <% resources.forEach(function(r) { %>
+          <tr>
+            <td><strong><%= r.title %></strong></td>
+            <td><%= r.category %></td>
+            <td><%= r.createdBy ? r.createdBy.name : 'Unknown' %></td>
+            <td>
+              <% if (r.fileUrl) { %>
+                <a href="/api/resources/<%= r._id %>/download" target="_blank" style="color: var(--primary);">
+                  📥 <%= r.fileName || 'Download' %>
+                </a>
+              <% } else { %>
+                <span style="color: var(--text-muted);">None</span>
+              <% } %>
+            </td>
+            <td><%= new Date(r.createdAt).toLocaleDateString() %></td>
+            <td>
+              <form action="/admin/resources/<%= r._id %>/delete" method="POST" style="display:inline;" onsubmit="return confirm('Are you sure you want to delete this resource?');">
+                <button type="submit" class="btn btn-danger btn-sm">Delete</button>
+              </form>
+            </td>
+          </tr>
+        <% }); %>
+      <% } %>
+    </tbody>
+  </table>
+</div>
+
+<%- include('partials/footer') %>

package/templates/server/views/login.ejs

@@ -0,0 +1,48 @@
+<%- include('partials/header', { title: 'Admin Login - MERN Exam' }) %>
+
+<div style="max-width: 420px; margin: 3rem auto;">
+  <div class="card">
+    <h2 style="margin-bottom: 0.5rem; text-align: center;">Admin Sign In</h2>
+    <p style="color: var(--text-muted); font-size: 0.875rem; text-align: center; margin-bottom: 1.5rem;">
+      Server-rendered session authentication demo
+    </p>
+
+    <% if (typeof error !== 'undefined' && error) { %>
+      <div class="alert alert-error"><%= error %></div>
+    <% } %>
+
+    <% if (typeof success !== 'undefined' && success) { %>
+      <div class="alert alert-success"><%= success %></div>
+    <% } %>
+
+    <form action="/admin/login" method="POST">
+      <div style="margin-bottom: 1rem;">
+        <label style="display: block; margin-bottom: 0.5rem; font-size: 0.875rem; font-weight: 500;">Admin Email</label>
+        <input 
+          type="email" 
+          name="email" 
+          required 
+          placeholder="admin@example.com"
+          style="width: 100%; padding: 0.6rem; border: 1px solid var(--border); border-radius: 6px; font-size: 0.9rem;"
+        />
+      </div>
+
+      <div style="margin-bottom: 1.5rem;">
+        <label style="display: block; margin-bottom: 0.5rem; font-size: 0.875rem; font-weight: 500;">Password</label>
+        <input 
+          type="password" 
+          name="password" 
+          required 
+          placeholder="••••••••"
+          style="width: 100%; padding: 0.6rem; border: 1px solid var(--border); border-radius: 6px; font-size: 0.9rem;"
+        />
+      </div>
+
+      <button type="submit" class="btn btn-primary" style="width: 100%; padding: 0.75rem;">
+        Log In to Admin Panel
+      </button>
+    </form>
+  </div>
+</div>
+
+<%- include('partials/footer') %>

package/templates/server/views/partials/footer.ejs

@@ -0,0 +1,6 @@
+  </main>
+  <footer>
+    <p>MERN Stack Project Generator &bull; EJS Server-Side Rendered Admin Panel</p>
+  </footer>
+</body>
+</html>

package/templates/server/views/partials/header.ejs

@@ -0,0 +1,60 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title><%= typeof title !== 'undefined' ? title : 'MERN Admin Portal' %></title>
+  <style>
+    :root {
+      --primary: #4f46e5;
+      --primary-hover: #4338ca;
+      --bg: #f8fafc;
+      --card-bg: #ffffff;
+      --text: #1e293b;
+      --text-muted: #64748b;
+      --border: #e2e8f0;
+      --danger: #ef4444;
+      --success: #10b981;
+    }
+    * { box-sizing: border-box; margin: 0; padding: 0; font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; }
+    body { background-color: var(--bg); color: var(--text); min-height: 100vh; display: flex; flex-direction: column; }
+    header { background: #1e1e2e; color: #fff; padding: 1rem 2rem; display: flex; justify-content: space-between; align-items: center; }
+    header h1 { font-size: 1.25rem; font-weight: 700; }
+    header .nav-links { display: flex; gap: 1rem; align-items: center; }
+    header a, header button { color: #fff; text-decoration: none; font-size: 0.9rem; }
+    .btn { padding: 0.5rem 1rem; border-radius: 6px; font-weight: 500; cursor: pointer; border: none; transition: 0.2s; }
+    .btn-primary { background: var(--primary); color: #fff; }
+    .btn-primary:hover { background: var(--primary-hover); }
+    .btn-danger { background: var(--danger); color: #fff; }
+    .btn-sm { padding: 0.25rem 0.5rem; font-size: 0.8rem; }
+    .container { max-width: 1100px; margin: 2rem auto; padding: 0 1rem; flex: 1; }
+    .card { background: var(--card-bg); border-radius: 8px; border: 1px solid var(--border); padding: 1.5rem; box-shadow: 0 1px 3px rgba(0,0,0,0.05); margin-bottom: 1.5rem; }
+    .alert { padding: 0.75rem 1rem; border-radius: 6px; margin-bottom: 1rem; font-size: 0.9rem; }
+    .alert-error { background: #fee2e2; color: #991b1b; border: 1px solid #f87171; }
+    .alert-success { background: #d1fae5; color: #065f46; border: 1px solid #34d399; }
+    table { width: 100%; border-collapse: collapse; margin-top: 1rem; }
+    th, td { text-align: left; padding: 0.75rem; border-bottom: 1px solid var(--border); font-size: 0.9rem; }
+    th { background: #f1f5f9; color: var(--text-muted); font-weight: 600; }
+    .badge { display: inline-block; padding: 0.2rem 0.5rem; border-radius: 9999px; font-size: 0.75rem; font-weight: 600; }
+    .badge-admin { background: #e0e7ff; color: #4338ca; }
+    .badge-student { background: #f1f5f9; color: #475569; }
+    .badge-active { background: #d1fae5; color: #065f46; }
+    .badge-inactive { background: #fee2e2; color: #991b1b; }
+    footer { background: #fff; border-top: 1px solid var(--border); padding: 1rem; text-align: center; color: var(--text-muted); font-size: 0.85rem; margin-top: auto; }
+  </style>
+</head>
+<body>
+  <header>
+    <h1>⚡ MERN Admin Portal (EJS Session Auth)</h1>
+    <div class="nav-links">
+      <% if (typeof adminUser !== 'undefined' && adminUser) { %>
+        <span>Logged in as: <strong><%= adminUser.name %></strong> (<%= adminUser.role %>)</span>
+        <form action="/admin/logout" method="POST" style="display:inline;">
+          <button type="submit" class="btn btn-danger btn-sm">Logout</button>
+        </form>
+      <% } else { %>
+        <a href="/admin/login">Admin Login</a>
+      <% } %>
+    </div>
+  </header>
+  <main class="container">