Teaching Institution Management Dashboard API

Production-ready Express.js & MongoDB backend API for an internal management dashboard of a teaching institution. Built with a strict layered architecture, JWT authentication with refresh token rotation, Joi validation, native Node.js EventEmitter, dynamic localization (English & Persian), background jobs, multi-channel notifications (Email, SMS, Bale Bot), custom Role-Based Access Control (RBAC), and private AWS S3 / MinIO object storage with presigned temporary URLs.

---

Technical Features & Domain Architecture

• Private S3 / MinIO Storage System:
  • Bucket Privacy: All buckets are strictly private; no public static file URLs are exposed.
  • Presigned URLs: Dynamic presigned temporary URLs generated via @aws-sdk/s3-request-presigner (getSignedUrl).
  • Two-Stage Temp Upload Workflow:
    1. Upload: User/Admin uploads file to POST /files/user/upload-temp (or /files/admin/upload-temp), streaming directly to S3_TEMP_BUCKET. Returns tempFileName.
    2. Commit: When submitting changes (e.g. creating/updating Certificate), the server copies the file from S3_TEMP_BUCKET to S3_STORAGE_BUCKET and removes the temp file.
  • Daily Temp Bucket Cleanup: Scheduled cron job running daily at 3:00 AM (tempBucketCleanupJob), deleting files in S3_TEMP_BUCKET older than 10 minutes.
• Courses & Classes:
  • Each Course can contain multiple Class sections (e.g. "AutoDesk Farvardin A", "AutoDesk Farvardin B").
  • Each Class maintains a registeredUsers array.
• Sessions & Attendance:
  • Embedded attendanceList array inside each Session model.
• Strict Layered Architecture: Router → Controller → Service → Model per component.

---

Endpoints Overview

Component	Scope	Verb	Route	Description	Permission
Auth	Public	POST	/auth/login	Login with username & password	Public
	Public	POST	/auth/refresh	Refresh access & refresh tokens	Public
	Auth	POST	/auth/logout	Revoke refresh token	Authenticated
Files	User	POST	/files/user/upload-temp	Upload file to S3 temp bucket	files:upload
	User	GET	/files/user/signed-url/:filename	Get presigned temporary GET URL	files:read
	Admin	POST	/files/admin/upload-temp	Admin upload file to S3 temp bucket	files:upload
	Admin	GET	/files/admin/signed-url/:filename	Admin get presigned GET URL	files:read
	Admin	DELETE	/files/admin/delete/:filename	Delete file from bucket	files:delete
Users	User	POST	/users/user/sign-up	Self-register as a student	Public
	User	GET	/users/user/get-self	Get self profile	Authenticated
	User	PUT	/users/user/update-self	Update self profile	Authenticated
	Admin	POST	/users/admin/create	Create user with specific role	users:create
	Admin	GET	/users/admin/get-all	Get paginated users	users:read
	Admin	GET	/users/admin/search	Search users	users:search
	Admin	GET	/users/admin/get-one/:id	Get single user by ID	users:read
	Admin	PUT	/users/admin/update/:id	Update user details	users:update
	Admin	DELETE	/users/admin/delete/:id	Delete user	users:delete
	Admin	POST	/users/admin/:userId/enroll	Enroll student into course	users:enroll
Professors	Admin	POST	/professors/admin/create	Create professor	professors:create
	Admin	GET	/professors/admin/get-all	List professors	professors:read
	Admin	GET	/professors/admin/search	Search professors	professors:search
	Admin	GET	/professors/admin/get-one/:id	Get professor details	professors:read
	Admin	PUT	/professors/admin/update/:id	Update professor	professors:update
	Admin	DELETE	/professors/admin/delete/:id	Delete professor	professors:delete
Courses	User	GET	/courses/user/get-all	List public courses	Public / Auth
	User	GET	/courses/user/get-one/:id	Get public course details	Public / Auth
	Admin	POST	/courses/admin/create	Create new course	courses:create
	Admin	GET	/courses/admin/get-all	List all courses	courses:read
	Admin	GET	/courses/admin/search	Search courses	courses:search
	Admin	GET	/courses/admin/get-one/:id	Get course by ID	courses:read
	Admin	PUT	/courses/admin/update/:id	Update course details	courses:update
	Admin	DELETE	/courses/admin/delete/:id	Delete course	courses:delete
Classes	User	GET	/classes/user/my-classes	View enrolled student classes	Authenticated
	Admin	POST	/classes/admin/create	Create class section	classes:create
	Admin	GET	/classes/admin/get-all	List class sections	classes:read
	Admin	GET	/classes/admin/search	Search class sections	classes:search
	Admin	GET	/classes/admin/get-one/:id	Get class details	classes:read
	Admin	PUT	/classes/admin/update/:id	Update class details	classes:update
	Admin	DELETE	/classes/admin/delete/:id	Delete class section	classes:delete
	Admin	PUT	/classes/admin/:id/registered-users	Edit registered users list	classes:register_users
Sessions	User	GET	/sessions/user/my-sessions	Enrolled student sessions	Authenticated
	Admin	POST	/sessions/admin/create	Schedule session	sessions:create
	Admin	GET	/sessions/admin/get-all	List sessions	sessions:read
	Admin	GET	/sessions/admin/search	Search sessions	sessions:search
	Admin	GET	/sessions/admin/get-one/:id	Get session details	sessions:read
	Admin	PUT	/sessions/admin/update/:id	Update/Cancel session	sessions:update
	Admin	DELETE	/sessions/admin/delete/:id	Delete session	sessions:delete
	Admin	PUT	/sessions/admin/:id/attendance	Record session attendance list	sessions:attendance
Payments	User	GET	/payments/user/my-payments	View user payments	Authenticated
	User	POST	/payments/user/pay/:id	Add payment transaction	Authenticated
	Admin	POST	/payments/admin/create	Create payment ledger	payments:create
	Admin	GET	/payments/admin/get-all	List payments	payments:read
	Admin	GET	/payments/admin/search	Search payments	payments:search
	Admin	GET	/payments/admin/get-one/:id	Get payment details	payments:read
	Admin	PUT	/payments/admin/update/:id	Update payment details	payments:update
	Admin	DELETE	/payments/admin/delete/:id	Delete payment ledger	payments:delete
Roles	Admin	POST	/roles/admin/create	Create custom role	roles:create
	Admin	GET	/roles/admin/get-all	List custom roles	roles:read
	Admin	GET	/roles/admin/search	Search roles	roles:search
	Admin	GET	/roles/admin/get-one/:id	Get role by ID	roles:read
	Admin	PUT	/roles/admin/update/:id	Update role permissions	roles:update
	Admin	DELETE	/roles/admin/delete/:id	Delete non-system role	roles:delete
Notifications	User	GET	/notifications/user/my-notifications	View received notifications	Authenticated
	Admin	POST	/notifications/admin/create	Send notification	notifications:create
	Admin	GET	/notifications/admin/get-all	List all notifications	notifications:read
	Admin	GET	/notifications/admin/search	Search notifications	notifications:search
	Admin	GET	/notifications/admin/get-one/:id	Get notification by ID	notifications:read
	Admin	PUT	/notifications/admin/update/:id	Update notification	notifications:update
	Admin	DELETE	/notifications/admin/delete/:id	Delete notification	notifications:delete
	Admin	POST	/notifications/admin/:id/retry	Manually retry failed dispatch	notifications:retry
Certificates	User	GET	/certificates/user/my-certificates	View personal certificates	certificates:read
	User	POST	/certificates/user/upload	Upload & commit certificate	files:upload
	Admin	POST	/certificates/admin/create	Issue official certificate	certificates:create
	Admin	GET	/certificates/admin/get-all	List all certificates	certificates:read
	Admin	GET	/certificates/admin/search	Search certificates	certificates:search
	Admin	GET	/certificates/admin/get-one/:id	Get certificate details	certificates:read
	Admin	PUT	/certificates/admin/update/:id	Update certificate	certificates:update
	Admin	DELETE	/certificates/admin/delete/:id	Delete certificate	certificates:delete

---

Verification

Check code syntax:

node --check app.js && node --check seed.js