E-commerce REST

A extendable-ready, modular REST API for e-commerce platforms with JWT authentication, product management, order workflows, and Razorpay integration.

ecommercerestexpressmongodbmongoosejwtrazorpaybackendapi

v1.0.0bundles

Overview

A full-stack ready e-commerce backend built on Express and MongoDB. Implements authentication, product catalog management, order processing, and Razorpay payment verification. Follows clean MVC patterns with dedicated models, controllers, routes, and middleware. Designed for reuse across storefronts, admin dashboards, or mobile commerce apps.

Installation

CLI

npx backternity add ecommerce-rest-api

What This Does

Installs a complete e-commerce backend foundation with authentication, product CRUD, order flow, Razorpay integration, and secure middleware.

Files & Folders Created

File / Path	Description
/src/models/userModel.js	User schema with hashed passwords.
/src/models/productModel.js	Product schema with categories, images, stock.
/src/models/orderModel.js	Order, order items, status, payment metadata.
/src/controllers/authController.js	Register, login, profile logic.
/src/controllers/productController.js	Product search, CRUD, pagination.
/src/controllers/orderController.js	Order creation, Razorpay order, payment verification.
/src/routes/authRoutes.js	User auth endpoints.
/src/routes/productRoutes.js	Public + admin product operations.
/src/routes/orderRoutes.js	Order/checkout/payment APIs.
/src/middleware/authMiddleware.js	JWT verification + admin guard.
/src/middleware/errorMiddleware.js	Centralized error formatting.
/src/config/db.js	MongoDB connection.
/src/config/razorpay.js	Razorpay instance.
/src/utils/generateToken.js	Helper for JWT access tokens.
server.js	Main Express bootstrap with security middleware.

Files to be modified

File / Path	Description
.env	Adds JWT secret, MongoDB URI, Razorpay keys, rate limits.
package.json	Adds required production dependencies.

Configuration

# Database
MONGODB_URI=mongodb://localhost:27017/backternity-ecom

# Server
PORT=3001
NODE_ENV=development

# JWT
JWT_SECRET=your_32_char_or_longer_secret
JWT_EXPIRES_IN=7d

# Razorpay
RAZORPAY_KEY_ID=your_razorpay_key_id
RAZORPAY_KEY_SECRET=your_razorpay_key_secret

# Misc
API_PREFIX=/api/v1
RATE_LIMIT_WINDOW_MS=60000
RATE_LIMIT_MAX=100

Frontend Integration

These endpoints allow seamless integration with any storefront—Next.js, React, Vue, mobile apps, or server-side frameworks. A typical frontend workflow includes user authentication, product listing, and Razorpay checkout.

POST/api/v1/users/register

Registers a new user account.

POST/api/v1/users/login

Authenticates user credentials and returns JWT token.

GET/api/v1/products

Fetches products with search, filtering, and pagination.

POST/api/v1/orders

Creates an order and a corresponding Razorpay order on the server.

POST/api/v1/orders/:id/payment/verify

Verifies the Razorpay signature and marks the order as paid.

Example

// Example React flow for Razorpay Checkout
import { useState } from 'react';

export default function CheckoutButton() {
  const [loading, setLoading] = useState(false);

  async function createOrder() {
    setLoading(true);

    // Step 1: Create server order
    const res = await fetch('/api/v1/orders', {
      method: 'POST',
      headers: { 'Content-Type': 'application/json',
                 Authorization: 'Bearer ' + localStorage.getItem('token') },
      body: JSON.stringify({
        orderItems: [...],
        shippingAddress: {...},
        paymentMethod: 'razorpay',
        totalPrice: 1200
      })
    });

    const data = await res.json();

    // Step 2: Open Razorpay checkout
    const rzp = new window.Razorpay({
      key: data.razorpay.key,
      amount: data.razorpay.amount,
      currency: 'INR',
      order_id: data.razorpay.id,
      handler: async function (paymentResponse) {
        // Step 3: Verify payment
        await fetch('/api/v1/orders/' + data.orderId + '/payment/verify', {
          method: 'POST',
          headers: { 'Content-Type': 'application/json',
                     Authorization: 'Bearer ' + localStorage.getItem('token') },
          body: JSON.stringify(paymentResponse)
        });
      }
    });

    rzp.open();
    setLoading(false);
  }

  return (
    <button onClick={createOrder} disabled={loading}>
      {loading ? 'Processing…' : 'Checkout with Razorpay'}
    </button>
  );
}

Usage

// Protect admin routes
const express = require('express');
const { protect, admin } = require('./src/middleware/authMiddleware');

const router = express.Router();

router.post('/products', protect, admin, (req, res) => {
  res.json({ message: 'Admin access granted' });
});