Noxa_Jewellery

Admin portal (admin.noxa.com) — used by SUPER_ADMIN, ADMIN, and CLIENT (store owners)

Storefront (clientname.noxa.com) — used by CUSTOMERS only.

Requirements

Use NestJS backend and MongoDB.

Authentication must be JWT-based with:
• Access token (short-lived)
• Refresh token (long-lived, persisted in DB, HTTP-only cookie)

Every JWT must include: userId, role, tenantId (tenantId is null for SUPER_ADMIN).

Passwords must be hashed (bcrypt).

Email must be unique within each user type.

On the frontend, I have implemented access token and refresh token authentication.
Both tokens are stored securely in localStorage after login.

When the access token expires, the application automatically calls the refresh token API, sends the refresh token, and receives a new access token and refresh token, which are then updated in storage.

If the refresh token is also expired or invalid, the user is automatically logged out to maintain application security.

yes frontend & backend set done for Admin panel & e-commerce application set up also done