A comprehensive, full-stack fitness and learning platform that bridges the gap between expert trainers and fitness enthusiasts. FitNovaX solves the problem of finding, booking, and managing fitness classes by providing a centralized hub where individuals can seamlessly discover classes, participate in a thriving community, and subscribe to premium content. The platform is designed for fitness enthusiasts looking for guided sessions and professional trainers seeking a digital space to host and monetize their expertise.
- Frontend Application: https://fitnovax.vercel.app/
- Backend Server: https://fitnovax-server.vercel.app/
Home Page Showcase
All Classes Interface
User Dashboard
Trainer Dashboard
Admin Dashboard
Email: admin@gmail.com
Password: Admin123
- Secure registration, login, and logout functionalities utilizing email or Google authentication.
- Comprehensive profile management and strict privacy controls.
- Browse a wide variety of fitness classes and access detailed course information.
- Save favorite classes for quick reference and personal tracking.
- Seamlessly book fitness classes with just a few clicks.
- Access a personalized dashboard to monitor all active class enrollments.
- Submit detailed applications to transition into an official platform trainer.
- Effortlessly create, publish, and manage new fitness programs.
- Track class enrollments, maximum capacities, and overall booking statistics.
- Launch community forum posts to engage directly with students and followers.
- Oversee and manage all registered accounts across the platform.
- Review, approve, or reject incoming trainer applications efficiently.
- Maintain oversight of active trainers and their respective permissions.
- Monitor all financial transactions, payments, and class subscriptions.
- Regulate all classes across the platform to ensure high quality standards.
- Moderate community forum posts to foster a safe and welcoming environment.
- Process seamless, secure payments for class subscriptions via an integrated checkout experience.
- Instant unlocking of class bookings immediately upon successful payment confirmation.
- Actively participate in dynamic community forum discussions.
- Interact with insightful posts created by trainers and fellow fitness enthusiasts.
- Upvote or downvote forum topics to highlight the most valuable content.
- Join the conversation by leaving comments and participating in threaded replies.
- Dedicated, role-specific interfaces (Admin, Trainer, Member) tailored to distinct operational needs.
- Intuitive navigation designed to effortlessly manage classes, favorites, applications, and community activities.
ASSESSMENT-PH-A10/
│
├── backend/ # Express.js Backend Application
│ ├── index.js # Main Application Entry Point & API
│
└── fontrend/ # Next.js Frontend Application
├── next.config.mjs # Next.js Configuration
├── package.json # Frontend Dependencies
└── src/
├── app/ # Next.js App Router (Pages & Layouts)
│ ├── (dashboard)/ # Role-based Dashboards (Admin, Trainer, Member)
│ ├── (main)/ # Public Pages (Classes, Forum, Profile, Auth)
│ ├── api/ # Frontend API & Next Auth Configuration
│ └── globals.css # Global Styling
├── Components/ # Reusable React UI Components
├── Hooks/ # Custom React Hooks
├── lib/ # Utility Functions and Library Configurations
└── Shared/ # Shared layouts, headers, and footers
| Category | Technology |
|---|---|
| Frontend Framework | Next.js, React |
| Backend Framework | Node.js, Express |
| Database | MongoDB |
| Authentication | better-auth (with mongo-adapter), Google OAuth |
| Payment Gateway | Stripe |
| Styling | Tailwind CSS |
| UI Components | HeroUI (@heroui/react), Lucide React, React Icons |
| Animations & Charts | Framer Motion, Recharts, React CountUp |
- Core: Next.js (
next), React (react,react-dom) - UI & Styling: Tailwind CSS (
tailwindcss), HeroUI (@heroui/react), Framer Motion (framer-motion), React Icons (react-icons), Lucide React (lucide-react) - Authentication: Better Auth (
better-auth,@better-auth/mongo-adapter) - Payments: Stripe (
stripe,@stripe/stripe-js) - Database & Utilities: MongoDB (
mongodb), Recharts (recharts), Sonner (sonner)
user: Manages personal profiles, role assignments, and secure authentication details.trainerAddClass: Stores the details of all fitness classes offered, including descriptions, categories, booking capacities, and approval status.forumCollection: Stores community-driven forum posts, including voting metrics and comment statistics.applyTrainer: Manages the application workflow for members requesting to become platform trainers.favorites-collection: Maintains personalized lists of saved fitness classes.subscription: Records payment transactions, Stripe session details, and class bookings.commentCollection: Facilitates the community forum by storing comments and nested replies linked to specific posts.
| Endpoint Purpose | Access Level | Main Functionality |
|---|---|---|
/api/public/all-class |
Public | Fetches all approved classes with optional search and category filters. |
/api/public/class-limit |
Public | Fetches top trending/booked classes to highlight on the home page. |
/api/user/booked-classes/:userId |
Authenticated | Retrieves all active class bookings for a specific profile. |
/subscription |
Public / Auth | Processes Stripe payments and securely records the class subscription. |
/api/favorites |
Authenticated | Allows saving or removing classes from personalized favorites lists. |
/api/community/forum |
Public | Retrieves a paginated list of community forum discussions. |
/api/forum/vote/:id |
Authenticated | Records and manages likes and dislikes on forum posts. |
/api/forum/comment |
Authenticated | Enables adding comments or threaded replies to forum discussions. |
/api/admin/users/booking-counts |
Admin | Retrieves system-wide, aggregated booking analytics for administrative monitoring. |
- Authentication Validation: Robust authentication flow managed securely via
better-auth. - Token Verification: Uses JSON Web Key Sets (JWKS) and custom
verifyTokenmiddleware to validate requests against authorized sessions. - Role-Based Protection: Specific middleware (
adminVerify,trainerVerify,userVerify) strictly limits backend route access based on assigned roles. - Route Protection: The Next.js frontend implements robust route guards preventing unauthorized access to sensitive dashboards.
- Payment Integrity: Validates checkout sessions before finalizing database class booking modifications to prevent fraudulent access.
- Data Consistency: Ensures necessary query parameters and relationships are present before mutating database collections.
- Built a scalable full-stack learning platform capable of serving members, trainers, and administrators with tailored experiences.
- Implemented secure authentication and role-based access control across the entire stack, ensuring data privacy and correct permission hierarchies.
- Developed real-time community engagement features, including threaded forum comments, post voting, and interactive discussions.
- Integrated seamless payment and subscription management using Stripe, providing a frictionless checkout process for class bookings.
- Designed responsive and accessible user interfaces utilizing modern aesthetic libraries like Tailwind CSS, HeroUI, and Framer Motion for premium micro-interactions.
- Complex Aggregation for Dashboard Analytics: Solved performance bottlenecks by implementing efficient MongoDB aggregation pipelines that calculate system-wide booking counts and transform them into optimized data structures for the admin dashboard.
- Threaded Nested Comments Architecture: Engineered a recursive parent-child relationship schema within MongoDB to support infinite threaded replies on community forum posts, while ensuring parent post statistics remain synchronized.
- Concurrency in Class Bookings: Resolved potential race conditions when multiple individuals book the same class simultaneously by utilizing atomic
$incoperations in MongoDB to strictly manage maximum class capacities. - Full-Stack Role-Based Access Control (RBAC): Architected a cohesive RBAC system that synchronously applies protection rules across Next.js frontend routes and Express backend API middleware.
- Introduce real-time push notifications for class approvals, forum replies, and successful transactions using WebSockets.
- Integrate a live video conferencing solution directly into the platform for remote and virtual fitness sessions.
- Develop a robust review and rating system allowing feedback on completed classes and trainers.
- Provide trainers with advanced analytics dashboards to visualize their class performance, engagement metrics, and revenue over time.
Follow these steps to set up and run both the frontend and backend of the project locally on your machine.
- Clone the server repository:
git clone https://github.com/nillworks/FitNovaX-Server
- Navigate to the backend directory:
cd FitNovaX-Server - Install dependencies:
npm install
- Configure Environment Variables:
Create a
.envfile in the root of the server directory and configure it (see the Environment Variables section at the bottom for details). - Start the backend server:
npm run server
- Clone the frontend repository:
git clone https://github.com/nillworks/FitNovaX-client
- Navigate to the frontend directory:
cd /fontrend - Install dependencies:
npm install
- Configure Environment Variables:
Create a
.env.localfile in the root of thefontrenddirectory and configure it (see the Environment Variables section at the bottom for details). - Start the development server:
npm run dev
- Open in Browser: Visit http://localhost:3000 to view the application.
For reviewers and developers setting up the project locally, here is the reference for the required environment variables. Please replace the dummy placeholder values with your actual credentials.
Create this file in the root of the fontrend directory:
# --- Better Auth & Base URLs ---
# The base URL where the application runs (typically localhost in dev)
BETTER_AUTH_URL=http://localhost:3000
baseURL=http://localhost:3000
# A secure random string used to encrypt user sessions
BETTER_AUTH_SECRET=your_auth_secret
# --- Database & External APIs ---
# Your MongoDB connection string
MONGO_DB_URI=your_mongodb_connection_string
# The public facing URL of your API
NEXT_PUBLIC_URL=http://localhost:8000
# ImgBB API key for uploading images
NEXT_PUBLIC_IMGBB_KEY=your_imgbb_api_key
# --- Google OAuth Credentials ---
GOOGLE_CLIENT_ID=your_google_client_id
GOOGLE_CLIENT_SECRET=your_google_client_secret
# --- Admin Configurations ---
# MongoDB Object ID of the primary administrator account
TOP_ADMIN_USER_ID=your_admin_user_id
NEXT_PUBLIC_TOP_ADMIN_USER_ID=your_admin_user_id
# --- Payments (Stripe) ---
# Your Stripe secret key for processing subscriptions
STRIPE_SECRET_KEY=your_stripe_secret_keyCreate this file in the root of your cloned server directory:
# The port number on which the backend server will run
PORT=your_port_number
# Your MongoDB database connection string for the backend
MONGODB_URI=your_mongodb_connection_string
# The URL of your frontend application
CLIENT_URL=your_client_url