This is a backend system for a full-scale Learning Management System, built to support real course delivery — not just CRUD operations. It handles three distinct user roles (admin, instructor, student), each with different permissions and access to course, payment, and progress data.

The system covers the full lifecycle of an online course: enrollment and payment, lecture progress tracking, wishlisting, and certificate generation on completion — all behind a versioned, secured API layer.

Core systems:
Role-based access control (JWT + Bcrypt) with distinct permission sets for admin, instructor, and student roles
Razorpay integration for secure course payments
Cloudinary + Multer for video/image uploads (course content, thumbnails)
Progress tracking across lectures, with wishlist management
Automatic certificate generation on course completion


Production practices:
Centralized logging (Winston + Morgan) for activity and error tracking
Security hardening: Helmet, HPP, rate limiting, and encrypted credentials
Versioned API structure (/api/v1/) for clean long-term scalability