Documentation Overview
The SaaS Starter Kit is a production-ready Next.js + Express/MongoDB template with cookie-based authentication, Google OAuth, email OTP password reset and an admin panel. Everything documented here is verified against the real source — commands and variable names quoted in these pages exist in the code.
What's Inside#
- Next.js 16 App Router frontend — TypeScript, Tailwind CSS 4, Redux Toolkit Query, next-themes
- Express 4 + Mongoose 8 backend — JWT cookie auth with hashed refresh-token rotation, Joi env validation, helmet security headers, rate limiting, graceful shutdown
- Google OAuth 2.0 with PKCE + signed state; account linking by verified email
- 6-digit email OTP password reset (SHA-256 hashed, 5-minute expiry, single use)
- Email verification flow, profile management, admin panel with filters and stats
- 272 backend tests (Jest + mongodb-memory-server), ESLint/Prettier, role-protected routes
Feature Status#
| Feature | Status |
|---|---|
| Email/password auth + email verification | Implemented |
| Google OAuth login + account linking/unlinking | Implemented |
| OTP password reset + rate limits | Implemented |
| Profile management (read/update, password, deactivate, delete) | Implemented |
| Admin panel (users list with filters, stats, status update) | Implemented |
| File uploads | Reserved in config — no upload endpoint yet |
How to Use This Documentation#
Read the sidebar top-down for the setup path: Getting Started → Configuration → Integrations → Reference → Help. The search box in the top bar matches titles, descriptions and keywords in both languages; the EN/MM switch translates navigation, headings and walkthroughs while commands stay in English.
0/60%