DGDrive Backend API

Delivered scope

• Designed a secure REST API with access tokens, refresh tokens, bcrypt password hashing, and role-aware protected routes.
• Modeled users, roles, permissions, locations, files, folders, and activity records with clean SQLite-backed relationships.
• Added Jest coverage around backend behavior so core authorization and file-management flows can be changed confidently.

Technology

System approach

• Runtime: Node.js 18+
• Framework: Express 4
• Database: SQLite via better-sqlite3
• Auth: JWT with access and refresh tokens

Challenges

• Implementing fine-grained Role-Based Access Control (RBAC) across multiple entity types.
• Ensuring reliable token management and secure authentication for diverse endpoints.

Solutions

• Created complex M:N junctions for dynamic user roles, permissions, and location access mappings.
• Integrated JWT-based authentication with bcrypt hashing and refresh token generation.

Key outcomes