Create E2e Saas

The project is bootstrapped via npx create-e2e-saas <app-name>, which triggers a Node.js CLI that copies the template files into the target directory using fs-extra. The CLI also installs dependencies and generates a .env file with placeholders for SMTP credentials and client URLs.

Once the scaffold is ready, the frontend is a Vite‑powered React 19 app that leverages Tailwind CSS for styling and Shadcn UI components for a consistent design system. Authentication state is managed through a global Auth Context that stores a JWT in an HTTP‑only cookie, ensuring protection against XSS. Routing is handled by React Router 7, with protected routes guarded by a custom hook that checks the authentication context.

The backend is an Express server exposing a set of REST endpoints under /api/auth and /api/user. Routes are defined in authRoutes.js and userRoutes.js, with middleware such as userAuth enforcing JWT validation. Controllers implement business logic: register, login, logout, send-verify-otp, verify-account, send-reset-otp, and reset-password. Passwords are hashed with bcrypt, and email verification is performed via Nodemailer.

Security guardrails include rate limiting on all auth endpoints, input validation with Joi, and sanitization to prevent injection attacks. Tokens are stored in HTTP‑only cookies, and the API uses CORS with a whitelist of the frontend origin. The build topology is split: the frontend is built with Vite into frontend/dist, while the backend is bundled with ES modules and run with node --experimental-modules.

Data ingestion flows from the frontend to the backend through Axios calls that include the JWT cookie. The backend validates the token, performs the requested action, and returns JSON responses. The database layer uses Mongoose schemas for users, with indexes on email and OTP fields to optimize lookups.