RESTful API backend for a billing and invoicing management system. Built with Node.js and Express, powered by Firebase Firestore as the database. It provides full CRUD operations for products, clients, suppliers, categories, sales, employees, and daily revenue reports.

🔗 Live Demo: https://sistema-facturacion-front-roan.vercel.app/

• Tech Stack
• Features
• Getting Started
  • Prerequisites
  • Installation
  • Environment Variables
  • Running Locally
  • Running with Docker
• Project Structure
• API Documentation
  • Authentication
  • Employees
  • Categories
  • Products
  • Suppliers
  • Clients
  • Sales
  • Reports
• Deployment
• Roadmap
• License

• 🔐 Session-based authentication with secure HTTP-only cookies
• 📦 Full CRUD for products, clients, suppliers, categories, and sales
• 👥 Employee management with role-based access
• 📊 Daily revenue reports with date range filtering and payment method breakdown
• 📧 Password recovery via email
• 🛡️ Security hardened with Helmet, CORS whitelist, and rate limiting
• 🎮 Demo mode with configurable request limits
• 🐳 Docker-ready with non-root user and automated deployments

• Node.js v18 or higher
• npm v9 or higher
• A Firebase project with Firestore enabled
• A Firebase Service Account Key (JSON file)

# Clone the repository
git clone https://github.com/AugustoC01/sistema-facturacion-back.git
cd sistema-facturacion-back

# Install dependencies
npm install

Create a .env.local file in the root directory based on the .example.env template:

# API Configuration
PORT = 8080
CORS_ORIGINS = https://yourdomain.com
NODE_ENV = development
APP_MODE = production
MAX_LIMIT = 30

# Firebase
GOOGLE_APPLICATION_CREDENTIALS = ./serviceAccountKey.json

# Nodemailer (Gmail)
SENDER = your-email@gmail.com
PASS = your-app-password

npm run dev

The server will start on http://localhost:<PORT> with hot-reload via Nodemon.

# Build the image
docker build -t sistema-facturacion-back .

# Run the container
docker run -p 8080:8080 \
  --env-file .env \
  -v /path/to/serviceAccountKey.json:/app/secrets/serviceAccountKey.json \
  sistema-facturacion-back

src/
├── index.js              # App entry point & middleware setup
├── config.js             # Environment config & CORS options
├── controllers/          # Request handlers
│   ├── authController.js
│   ├── categoryController.js
│   ├── clientController.js
│   ├── employeeController.js
│   ├── productController.js
│   ├── reportsController.js
│   ├── saleController.js
│   └── supplierController.js
├── routes/               # Route definitions
│   ├── router.js         # Main router (mounts all sub-routes)
│   ├── authRoute.js
│   ├── categoryRoute.js
│   ├── clientRoute.js
│   ├── employeeRoute.js
│   ├── productRoute.js
│   ├── reportRoute.js
│   ├── saleRoute.js
│   └── supplierRoute.js
├── middleware/
│   ├── userAuth.js       # Session authentication middleware
│   └── demoRateLimiter.js
├── service/
│   ├── firebase.js       # Firebase Admin SDK initialization
│   ├── db.js             # Generic Firestore CRUD operations
│   └── employeeService.js
└── utils/
    ├── bcrypt.js          # Password hashing helpers
    ├── idGenerator.js     # Unique ID generation (nanoid)
    ├── nodemailer.js      # Email sending
    └── objectUtils.js

⚠️ All endpoints except /user/* require an active session cookie (sessionId). Unauthenticated requests will receive a 401 Unauthorized response.

Base URL: http://localhost:8080

{
  "name": "John Doe",
  "email": "john@example.com",
  "password": "securepassword"
}

{
  "email": "john@example.com",
  "password": "securepassword"
}

{
  "email": "john@example.com"
}

🔒 Requires authentication

🔒 Requires authentication

🔒 Requires authentication

Filtering & Queries:

Field Operations:

🔒 Requires authentication

🔒 Requires authentication

🔒 Requires authentication

📊 Creating or deleting a sale automatically updates the daily revenue report.

🔒 Requires authentication

Date format for the range query: DD-MM-YYYY (e.g., /reports/days/01-01-2025/31-01-2025)

This project includes a GitHub Actions workflow that automatically deploys to a VPS on every push to main. The pipeline connects via SSH and runs a deployment script on the server.

Required GitHub Secrets:

• VPS_HOST — Server IP/hostname
• VPS_USER — SSH username
• SSH_PRIVATE_KEY — Private SSH key

• Expand employees management features
• Expand providers/suppliers management
• Add more analytics and reporting capabilities

This project is licensed under the ISC license.

Made with ❤️ by Augusto