Natours Backend API

A tour-booking REST API with role-based access, secure authentication, reviews, and flexible query controls.

01 / Context

What it does

Natours is the API layer for a tour marketplace. It covers accounts, permissions, tours, reviews, and the query features a catalogue needs, including filtering, sorting, field selection, and pagination.

02 / Product surface

Core features

01User authentication and authorization with JWT
02CRUD operations for tours, users, and reviews
03Advanced filtering, sorting, field limiting, and pagination
04Data validation and sanitization
05Error handling and logging middleware
06Secure password hashing and reset functionality
07Role-based access control for admin and users

Back to project index