- Overview
- Objectives
- Features
- Architecture
- Installation & Usage
- Deployment
- Security Measures
- Future Improvements
- Credits
- License
SecureAuthProject is a secure authentication system built with Node.js, Express, and MongoDB Atlas.
It demonstrates modern cyber security practices including password hashing, session management, rate limiting, and input validation.
This project was developed as part of the Cyber Security Major Project (EdiGlobe).
- Design and deploy a secure authentication system resistant to common web attacks.
- Gain hands‑on experience with web security, deployment, and defensive coding.
- Showcase practical implementation of authentication and protection mechanisms.
- User registration and login
- Password hashing with bcrypt
- Session management with secure cookies
- Rate limiting to prevent brute force attacks
- Input validation with express-validator
- Security headers with Helmet
- Protected routes (Profile, Logout)
- Frontend: EJS templates + Bootstrap for UI polish
- Backend: Express routes, middleware, session handling
- Database: MongoDB Atlas cluster
- Security Layer: bcrypt, Helmet, rate limiting, input validation
Clone the repository and install dependencies:
git clone https://github.com/chaitanya554-11/SecureAuthProject.git
cd SecureAuthProject
npm install
npm startThis project is deployed on Render. Live demo: https://secureauthproject.onrender.com
-Password hashing with bcrypt -Rate limiting to prevent brute force login attempts -Input validation against injection attacks -Helmet for secure HTTP headers -Session protection with httpOnly cookies
-CSRF protection -HTTPS enforcement -Forgot Password flow -Role‑based access control
-Author:Lakkoju Chandra Chaitanya -Email:cmt.chaitanya554@gmail.com -Institution: EdiGlobe Cyber Security Major Project
This project is licensed under the MIT License. See the LICENSE file in the repository.