Hybrid Auth MongoDB (Mongoose)

Hybrid authentication with MongoDB, Mongoose, and Redis-backed sessions.

Installation Guide

Add the hybrid authentication blueprint using the Servercn CLI:

npx servercn-cli@latest add blueprint hybrid-auth

API Endpoints

All endpoints are the same for both MVC and Feature architectures.

Authentication Routes

Base URL: `http://localhost:9000/api/v1/auth`

Method	Endpoint	Description
POST	/signup	Register new user and send verification OTP
POST	/verify-user	Verify email with OTP
POST	/signin	Login user and set auth cookies
GET	/profile	Get current user profile
PATCH	/profile	Update profile and avatar
GET	/sessions	List active sessions
DELETE	/sessions	Revoke all sessions except current
DELETE	/sessions/:sessionId	Revoke a specific session
POST	/refresh-token	Rotate access and refresh tokens
POST	/logout	Logout current session
POST	/forgot-password	Request password reset OTP
POST	/verify-reset-otp	Verify password reset OTP
POST	/reset-password	Reset password after OTP verification
POST	/change-password	Change password and revoke sessions
POST	/account/request-delete	Request account deletion token
DELETE	/account/delete	Delete or deactivate account by token
PUT	/account/reactivate	Reactivate soft-deleted account

OAuth Routes

Base URL: `http://localhost:9000/api/auth`

Method	Endpoint	Description
GET	/github	Initiate GitHub OAuth
GET	/github/callback	GitHub OAuth callback
GET	/google	Initiate Google OAuth
GET	/google/callback	Google OAuth callback

Health Check

Base URL: `http://localhost:9000/api/v1/health`

Method	Endpoint	Description
GET	/	Basic health check
GET	/detailed	Detailed health status

Environment Variables

Create a .env file with the following:

PORT='9000'
NODE_ENV='development'
LOG_LEVEL='info'
CORS_ORIGIN=''
CLIENT_URL=''
 
DATABASE_URL=''
REDIS_URL=''
 
JWT_ACCESS_SECRET=''
JWT_REFRESH_SECRET=''
CRYPTO_SECRET=''
 
RESEND_API_KEY=''
EMAIL_FROM=''
 
CLOUDINARY_CLOUD_NAME=''
CLOUDINARY_API_KEY=''
CLOUDINARY_API_SECRET=''
 
GOOGLE_CLIENT_ID=''
GOOGLE_CLIENT_SECRET=''
GOOGLE_REDIRECT_URI=''
 
GITHUB_CLIENT_ID=''
GITHUB_CLIENT_SECRET=''
GITHUB_REDIRECT_URI=''

Hybrid Auth MongoDB (Mongoose)

Installation Guide

API Endpoints

Authentication Routes

Base URL: http://localhost:9000/api/v1/auth

OAuth Routes

Base URL: http://localhost:9000/api/auth

Health Check

Base URL: http://localhost:9000/api/v1/health

Environment Variables

File & Folder Structure

Installation

Base URL: `http://localhost:9000/api/v1/auth`

Base URL: `http://localhost:9000/api/auth`

Base URL: `http://localhost:9000/api/v1/health`