HomeWorkLaboratoryCertificationsBlogLet's Talk

© 2026 Juan Villegas. All rights reserved.

Solutions Architect

    Back

    Mediexpert — API

    API — multi-role B2B2C

    Node and Express backend for Mediexpert: 3 roles with separate routes, natural key data model, and payment validation flow via bank transfer, with real security discipline over dependencies.

    Infrastructure & Backend

    The Challenge

    Centralize the management of sellers and buyers, tracking equipment by serial number, and validating payments with receipts. Each role needed to access only their part of the business via API.

    The Solution

    Three roles with completely separate routes and automatic post-login redirect based on role, data model using natural keys (email instead of ObjectId), and a payment validation flow with clear states (pending until an admin validates the receipt).

    Related project

    Mediexpert

    Role in the project

    Solutions Architect and Full Stack Dev.

    Tech Stack

    Backend

    Node.jsExpress

    Database

    MongoDBMongoose

    Infrastructure

    DockerTraefik

    What it protects in production

    • Authentication with JWT and passwords with bcrypt, never in plain text.
    • Periodic dependency audit with npm audit, patching to the minimum necessary version for each case.
    • Active and periodic review of what could be exposed on the server, to not leave anything out of carelessness.

    How it's deployed

    Web frontend (Next.js)
    Traefik (reverse proxy + automatic TLS)
    Docker container (Node/Express API)
    MongoDB
    React Flow
    Press enter or space to select a node. You can then use the arrow keys to move the node around. Press delete to remove it and escape to cancel.
    Press enter or space to select an edge. You can then press delete to remove it or escape to cancel.
    ShareLinkedIn

    Need something similar?

    Let's talk about your project.

    Let's talk