NexaAPI
REST API Platform with Auth and RBAC
Overview
NexaAPI is a backend-focused project demonstrating production API patterns. The server layer implements versioned REST APIs with controller-service-model separation, global error handling, pagination, and task filtering. Authentication uses JWT with bcrypt password hashing, protected routes, and role-based access control for user and admin workflows. Security hardening includes Helmet, CORS allowlisting, request validation with express-validator, rate limiting, and auto-generated Swagger/OpenAPI documentation. The companion React frontend demonstrates auth context management, protected route guards, toast-based feedback, and Axios interceptors for automatic authorization header injection.
Tech Stack
Key Outcomes
Developed versioned REST APIs with controller-service-model separation, global error handling, pagination, and task filtering.
Implemented JWT authentication, password hashing, protected routes, and role-based access for user/admin workflows.
Hardened APIs with Helmet, CORS allowlisting, request validation, rate limiting, and Swagger/OpenAPI documentation.
Built a React frontend with auth context, protected routes, toast feedback, and Axios authorization interceptors.