Web Project (IPEFA Sup Seraing 2025/2026)

Overview

This repository contains the full-stack web project developed for the course:
Bachelor in Computer Science – Application Development
IPEFA Sup Seraing – Academic Year 2025/2026

It includes:

• A complete NestJS backend API (backend-nest/)
• A modern Angular frontend (frontend/)
• Documentation, architecture schemas, and setup guides (docs/)

Repository Structure

.
├── backend-nest/        → NestJS API (Auth, Security, Migrations, Docker)
├── frontend/            → Web client (Angular)
├── docs/                → Detailed documentation, schemas, architecture
├── README.fr.md         → French version
├── README.md            → This file (English)
└── LICENSE              → Project license

Tech Stack

Backend (NestJS)

• Framework: NestJS 10 (TypeScript 5)
• Database: PostgreSQL & TypeORM
• Security: JWT Access Token, JWT Refresh Token, Refresh Token Rotation, Bcrypt
• Documentation: Swagger (OpenAPI)
• DevOps: Docker & Docker Compose

Frontend (Angular 21)

The frontend is built with Angular 21 using:

• Standalone Components
• Signals for state management
• Angular Router with lazy loading
• Modern folder structure:
  • core/ → services, auth, interceptors, layouts
  • features/ → dashboard, recipes, members
  • shared/ → reusable UI components
• Auth flow:
  • Login / Register
  • In-memory Access Token + HttpOnly Cookie Refresh Token
  • Protected routes with functional guards
• UI:
  • Authenticated layout with sidebar
  • Dashboard listing recipes
  • CRUD for recipes (in progress)

Quick Start

Backend

The backend easily runs via Docker. From the project root:

cd backend-nest
npm run docker:dev

The interactive Swagger documentation will be immediately available at: 👉 http://localhost:3002/docs (Check the port defined in your .env)

Frontend

The frontend easily runs via Angular CLI. From the project root:

cd frontend
npm install
npm start

Angular dev server: 👉 http://localhost:4200

Database & Migrations

Inside the backend-nest/ directory, TypeORM migrations ensure database schema integrity:

• Generate a new migration:

  npm run migration:generate -- src/migrations/MigrationName
  

• Run pending migrations:

  npm run migration:run
  

Security & Authentication

The backend implements a robust and modern security flow:

• Access Token (JWT): Short-lived (15 min), transmitted via HTTP Header (Bearer).
• Refresh Token (JWT): Long-lived (7 days), hashed and stored in the DB to allow revocation.
• Refresh Token Rotation: Every use of a Refresh Token generates a new Access/Refresh pair, preventing replay attacks.
• NestJS Guards: Fine-grained route protection (JwtAuthGuard, RolesGuard, RefreshTokenGuard).

The frontend handles:

• Automatic token refresh (Silent Refresh) via interceptor
• Redirection on 401/403
• Logout + token revocation in database

Documentation

All project documentation is organized by domain for clarity and long-term maintainability.

• Architecture

  • Architecture

• Setup & Installation

  • Setup Guide

• Authentication & Security

  • Authentication
  • JWT Flow
  • Auth Guards
  • Auth Decorators

A global documentation index is available here:
👉 Documentation Index

License

This project is distributed under the MIT License.

Author

Project developed by Gregory Colard
IPEFA Sup Seraing – Class of 2025/2026