Cloud Drive Backend

A secure, scalable cloud storage backend built with Node.js, Express, and MongoDB. Features real-time file uploads via Socket.IO and Cloudinary integration for file storage.

🚀 Features

• Authentication: Firebase Authentication with JWT token support
• File Management: Upload, download, delete, and restore files
• Real-time Uploads: Socket.IO powered chunked file uploads with progress tracking
• File Sharing: Share files with specific users or generate public links
• Access Control: Role-based permissions (view/edit) with expiry dates
• Trash System: Soft delete with restore and permanent delete options
• Stream Proxy: Secure file streaming without exposing Cloudinary URLs
• Audit Logging: Track file access and modifications

🛠️ Tech Stack

• Runtime: Node.js
• Framework: Express.js
• Database: MongoDB with Mongoose
• Cache: Redis
• Authentication: Firebase Admin SDK + JWT
• File Storage: Cloudinary
• Real-time: Socket.IO
• Security: Helmet, CORS, Basic Auth middleware

📁 Project Structure

src/
├── config/           # Express and app configuration
├── middleware/       # Authentication and other middleware
├── modules/
│   ├── media/        # File management (routes, facade, service, model)
│   └── user/         # User management
├── routes/           # API route definitions
├── services/         # External service integrations (Cloudinary, Firebase)
└── utils/            # Helper utilities

🔧 Quick Start

Prerequisites

• Node.js v18+
• MongoDB database
• Redis server
• Firebase project
• Cloudinary account

Installation

1. Clone the repository

   git clone https://github.com/07Akashh/DriveBackend
   cd DriveBackend

2. Install dependencies

   npm install

3. Configure environment variables

   cp .env.example .env

   Edit .env and fill in your values. See SETUP.md for detailed instructions.

4. Start the server

   # Development
   npm run dev
   
   # Production
   npm start

📖 For detailed setup instructions, see setup.md

⚙️ Environment Variables

Variable	Description	Example
PORT	Server port	8080
NODE_ENV	Environment	development / prod
JWT_SECRET_KEY	JWT signing secret	your-secret-key
JWT_EXPIRES_IN	Token expiry	7d
FIREBASE_SERVICE_ACCOUNT_BASE64	Base64 encoded Firebase key	-
CLOUDINARY_CLOUD_NAME	Cloudinary cloud name	-
CLOUDINARY_API_KEY	Cloudinary API key	-
CLOUDINARY_API_SECRET	Cloudinary API secret	-
MONGODB_NAME	MongoDB database name	-
MONGO_USERNAME	MongoDB username	-
MONGO_PASS	MongoDB password	-
REDIS_SERVER	Redis host	-
REDIS_PORT	Redis port	6379
REDIS_USERNAME	Redis username	-
REDIS_PASS	Redis password	-
BASIC_AUTH_USERNAME	API basic auth username	-
BASIC_AUTH_PASS	API basic auth password	-
FRONTEND_URL	Frontend URL for CORS	http://localhost:3000

📡 API Endpoints

Media

Method	Endpoint	Description
GET	/api/v1/media	List user's files
GET	/api/v1/media/trashed	List trashed files
GET	/api/v1/media/shared/with-me	List files shared with user
GET	/api/v1/media/:id	Get file details
GET	/api/v1/media/:id/details	Check file access
DELETE	/api/v1/media/:id	Move file to trash
PUT	/api/v1/media/:id/restore	Restore from trash
DELETE	/api/v1/media/:id/permanent	Permanently delete
POST	/api/v1/media/:id/share/users	Share with users
GET	/api/v1/media/:id/shares	Get share list

Proxy (No Basic Auth)

Method	Endpoint	Description
GET	/api/v1/proxy/media/:id/stream	Stream file content
GET	/api/v1/proxy/media/:id/download	Download file

🔌 Socket.IO Events

Upload Flow

// Client -> Server
socket.emit("media:upload:start", {
  filename: "file.pdf",
  mimeType: "application/pdf",
  size: 1024000
});

// Server -> Client
socket.on("media:upload:ready", ({ uploadId }) => {
  // Send chunks
  socket.emit("media:upload:chunk", { uploadId, chunk, chunkIndex });
});

// Server -> Client (progress)
socket.on("media:upload:chunk-received", ({ uploadedSize, chunkIndex });

// Server -> Client (complete)
socket.on("media:upload:complete", { media });

🐳 Docker

# Build
docker build -t cloud-drive-backend .

# Run
docker run -d -p 8080:8080 --env-file .env cloud-drive-backend

🔐 Security

• Basic Auth: Protects main API endpoints
• Firebase Auth: Validates user identity
• JWT Tokens: Session management
• Rate Limiting: Prevents abuse
• Origin Validation: Stream endpoints validate request origin
• Secure Streaming: Files proxied through server, Cloudinary URLs hidden

📄 License

MIT