🔐 MERN Authentication System

A secure, production-level authentication system built with the MERN stack. Includes full JWT-based authentication with refresh tokens, email verification, Google OAuth2 login, role-based access (Admin/User).

---

🚀 Features

• 🔐 JWT Access + Refresh Tokens
• 📧 Email Verification on Registration
• 🔁 Refresh Token Rotation
• 🔑 Password Reset via Email (Link or OTP)
• 🔒 Secure Cookies (httpOnly, SameSite, Secure)
• 🛂 Role-Based Access Control (RBAC)
• 🌐 Google Login via OAuth2
• 🔐 Optional 2FA (via email or authenticator app)
• 🛡 Security: Helmet, CORS, Rate Limiting, XSS Protection

---

🧱 Tech Stack

Layer	Tech
Frontend	React, Tailwind CSS, Axios, Formik, joi
Backend	Node.js, Express.js, MongoDB, Mongoose
Auth	JWT, bcrypt, Google OAuth, passportjs, nodemailer , SendGrid
Security	Helmet, cors, express-rate-limit, xss-clean, mongo-sanitize

---

📧 Email Integration (SendGrid)

We use SendGrid for transactional emails (signup confirmation, password reset, notifications).

---

📸 UI Preview

Login page

Signup page

Reset password page

---

⚙️ Installation

# Clone the repository
git clone https://github.com/manukumar7/mern-auth-system.git

# Move into the project directory
cd mern-auth-system

# Install dependencies
npm install

▶️ Running the Project

server

cd server
npm run dev

client

cd client
npm run dev

📩 Contributing

🙌 Contributions are welcome! Feel free to fork the repo and submit a pull request.

Built with ❤️ by Manu Kumar Pal