SaaSFoundry

Core System Architecture The application follows a classic Model‑View‑Controller (MVC) layout. The frontend lives in a Vite‑powered React project, leveraging Shadcn UI primitives and Tiptap for rich‑text editing. State is managed with React hooks and context, while API calls are performed via fetch/axios against the Express server. The backend is an Express server (server-mvc.ts) that wires route modules (authRoutes.ts, userRoutes.ts, paymentRoutes.ts, tokenRoutes.ts, transactionRoutes.ts, supportRoutes.ts). Controllers encapsulate business logic, and services interact with MongoDB via Mongoose models. Configuration and environment handling are abstracted in a central config module.

Data Ingestion & Persistence User‑generated content such as rich‑text posts, token purchase records, and support tickets are persisted in MongoDB collections. Input validation is enforced using Joi schemas before data reaches Mongoose models, mitigating injection risks. The payment flow integrates Razorpay: /tokens/create-order creates an order, /tokens/verify-payment validates the webhook payload (raw JSON) and updates the user's token balance. Transaction history and token statistics are stored atomically to ensure consistency.

Execution Flow & Security Guardrails Authentication is JWT‑based with refresh tokens (/register, /login, /refresh, /logout). Protected routes employ the requireAuth middleware, while admin‑only endpoints use requireAdmin. Global error handling middleware captures exceptions, logs them, and returns sanitized JSON error responses. Additional security layers include Helmet headers, strict rate limiting, and CORS configuration. Webhook endpoints parse raw bodies to verify signatures before processing payments.

Build & Deployment Topology During development, Vite serves the React bundle with hot‑module replacement, while the Express server runs in watch mode. In production, the server serves static assets generated by Vite and runs behind a Node process manager (e.g., PM2). Environment variables configure MongoDB connections, Razorpay credentials, and Node environment flags. The codebase is TypeScript‑strict, enabling compile‑time safety across the stack.