Resume Maker Latex

The system follows a layered architecture: the presentation layer (React SPA) communicates with a RESTful API layer (/api/auth/* and /api/resumes/*) over HTTPS. Each request passes through an isAuthenticated middleware that validates JWT tokens, applies Helmet security headers, and enforces rate‑limiting to mitigate brute‑force attacks. Data ingestion begins at the controller level where incoming payloads are validated against Joi schemas before being persisted to MongoDB. Resume documents contain sanitized HTML generated by Tiptap, ensuring XSS safety via server‑side sanitization.

When a user triggers a download, the controller delegates to a service that either streams a PDFKit document or invokes the LaTeX compiler (node‑latex). The compiled PDF or .tex source is streamed back to the client, allowing instant preview or offline editing. The frontend leverages React Query for caching and optimistic UI updates, while the drag‑and‑drop UI (dnd-kit) synchronously updates the resume's section order in the database, handling rapid re‑ordering edge cases.

Security guardrails include JWT token rotation, HTTP‑only cookies, and strict CORS policies. All routes are protected by the isAuthenticated middleware, and sensitive operations (e.g., resume deletion) are logged for audit. The build topology uses Vite for fast HMR in development and produces a production bundle that is bundled into an Electron executable, delivering native‑like performance while retaining web flexibility.

The deployment pipeline (not fully detailed in the code) is designed for continuous integration with automated linting, TypeScript compilation, and unit tests (future work). The repository also contains scripts for MongoDB Atlas connection pooling and graceful shutdown handling, ensuring resilience in production environments.