📚 StudyNotion

Empowering learners and educators — one course at a time.

StudyNotion is a full-stack EdTech platform where Students can discover, purchase, and stream courses, Instructors can build and monetize their content, and Admins can govern the entire ecosystem — all in one seamless, cloud-powered experience.

Live Demo

🚀 The application is live and fully functional. Click below to try it out!

🌐 Service	🔗 URL
Frontend (React App)	https://study-notion-blue-mu.vercel.app
Alternate URL	https://study-notion-git-main-arjuns-projects-c804732d.vercel.app

🎯 Project Overview

StudyNotion is a production-grade, full-stack EdTech SaaS platform built on the MERN stack (MongoDB, Express, React, Node.js). It replicates the core experience of platforms like Udemy or Coursera, offering:

🎓 Students — browse categories, enroll in courses via Razorpay, stream video lectures, and track their progress.
🧑‍🏫 Instructors — create structured courses with sections & video sub-sections, manage drafts, publish content, and view earnings analytics.
🛡️ Admins — manage course categories and platform governance.

The platform supports OTP-based email verification, JWT authentication, Cloudinary media uploads, Razorpay payment gateway, and automated email notifications — making it a complete, real-world EdTech solution.

✨ Key Features

Role	Features
🎓 Student	Browse & search courses by category, cart & checkout via Razorpay, video lecture streaming, progress tracking, ratings & reviews
🧑‍🏫 Instructor	Course creation wizard (sections + video sub-sections), draft/publish toggle, earnings dashboard via Chart.js, edit/delete courses
🛡️ Admin	Create & manage categories, platform-wide oversight
🔐 Auth	OTP email verification on signup, JWT-based sessions, forgot/reset password flow
☁️ Media	Cloudinary CDN for all video and image uploads with `express-fileupload`
📧 Email	Nodemailer transactional emails for OTP, enrollment confirmation, and payment success
💳 Payments	Razorpay order creation, payment capture, and webhook-style server-side verification

🏗️ System Architecture

The app follows a classic Client–Server–Database three-tier architecture with cloud services integrated at the server layer.

graph TD
    subgraph Client ["🖥️ Client (React 18 + Redux)"]
        UI[React Pages & Components]
        RTK[Redux Toolkit Store]
        Axios[Axios HTTP Layer]
    end

    subgraph Server ["⚙️ Server (Node.js + Express)"]
        Routes[REST API Routes]
        Middleware[Auth Middleware\nJWT + Role Guard]
        Controllers[Business Logic Controllers]
        Utils[Utils: OTP, Email, Cloudinary]
    end

    subgraph Database ["🗄️ Database (MongoDB Atlas)"]
        User[(User)]
        Course[(Course)]
        Section[(Section)]
        SubSection[(SubSection)]
        Category[(Category)]
        CourseProgress[(CourseProgress)]
        Rating[(RatingAndReview)]
        OTP[(OTP)]
        Profile[(Profile)]
    end

    subgraph CloudServices ["☁️ Cloud Services"]
        Cloudinary[Cloudinary CDN\nImages & Videos]
        Razorpay[Razorpay\nPayment Gateway]
        Nodemailer[Nodemailer\nSMTP Email]
    end

    UI --> Axios
    Axios -->|HTTPS REST| Routes
    Routes --> Middleware
    Middleware --> Controllers
    Controllers --> Database
    Controllers --> CloudServices
    RTK --> UI

🔄 Application Flow Diagram

Auth / Login Flow

sequenceDiagram
    participant U as 🧑 User (Browser)
    participant C as React Client
    participant S as Express Server
    participant DB as MongoDB
    participant Mail as Nodemailer

    U->>C: Clicks Sign Up
    C->>S: POST /api/v1/auth/sendotp {email}
    S->>DB: Check if email exists
    S->>DB: Save OTP (TTL: 5 min)
    S->>Mail: Send OTP email
    Mail-->>U: OTP delivered to inbox

    U->>C: Enters OTP + form details
    C->>S: POST /api/v1/auth/signup {otp, ...details}
    S->>DB: Verify OTP
    S->>DB: Create User + Profile documents
    S-->>C: { success: true, token, user }
    C->>C: Store token in localStorage + Redux

    U->>C: Clicks Login
    C->>S: POST /api/v1/auth/login {email, password}
    S->>DB: Find user, bcrypt.compare(password)
    S-->>C: JWT token (signed with JWT_SECRET)
    C->>C: Persist token, redirect to Dashboard

Course Purchase Flow

sequenceDiagram
    participant S as Student
    participant C as React Client
    participant API as Express API
    participant RZ as Razorpay
    participant DB as MongoDB
    participant Mail as Nodemailer

    S->>C: Click "Buy Now"
    C->>API: POST /api/v1/payment/capturePayment (auth + isStudent)
    API->>RZ: Create Order (amount, currency)
    RZ-->>API: { orderId, amount }
    API-->>C: Order details

    C->>RZ: Open Razorpay Checkout
    S->>RZ: Completes payment
    RZ-->>C: { razorpay_payment_id, razorpay_signature }

    C->>API: POST /api/v1/payment/verifyPayment
    API->>API: HMAC-SHA256 signature verification
    API->>DB: Enroll student in course
    API->>Mail: Send enrollment confirmation email
    API-->>C: { success: true }
    C->>C: Navigate to enrolled courses

📊 Database Schema

erDiagram
    USER {
        ObjectId _id
        String firstName
        String lastName
        String email
        String password
        String accountType
        Boolean active
        String image
        String token
        Date resetPasswordExpires
    }
    PROFILE {
        ObjectId _id
        String gender
        String dateOfBirth
        String about
        String contactNumber
    }
    COURSE {
        ObjectId _id
        String courseName
        String courseDescription
        String whatYouWillLearn
        Number price
        String thumbnail
        String[] tag
        String[] instructions
        String status
        Date createdAt
    }
    SECTION {
        ObjectId _id
        String sectionName
    }
    SUBSECTION {
        ObjectId _id
        String title
        String timeDuration
        String description
        String videoUrl
    }
    CATEGORY {
        ObjectId _id
        String name
        String description
    }
    RATINGANDREVIEW {
        ObjectId _id
        Number rating
        String review
    }
    COURSEPROGRESS {
        ObjectId _id
        ObjectId[] completedVideos
    }
    OTP {
        ObjectId _id
        String email
        String otp
        Date createdAt
    }

    USER ||--|| PROFILE : "additionalDetails"
    USER ||--o{ COURSE : "courses (enrolled)"
    USER ||--o{ COURSEPROGRESS : "courseProgress"
    COURSE ||--|| USER : "instructor"
    COURSE ||--o{ SECTION : "courseContent"
    COURSE ||--|| CATEGORY : "category"
    COURSE ||--o{ RATINGANDREVIEW : "ratingAndReviews"
    COURSE ||--o{ USER : "studentsEnrolled"
    SECTION ||--o{ SUBSECTION : "subSection"
    COURSEPROGRESS ||--o{ SUBSECTION : "completedVideos"
    RATINGANDREVIEW ||--|| USER : "user"
    RATINGANDREVIEW ||--|| COURSE : "course"

🔁 Request Lifecycle

flowchart LR
    A([Browser Request]) --> B[React Axios\naxiosToastError interceptor]
    B -->|HTTPS| C[Express Router]
    C --> D{Route\nPublic?}
    D -->|Yes| G[Controller]
    D -->|No| E[auth middleware\nJWT Verify]
    E --> F{Role\nCheck}
    F -->|isStudent| G
    F -->|isInstructor| G
    F -->|isAdmin| G
    F -->|Fail 401| Z([Error Response])
    G --> H{Operation\nType}
    H -->|DB Query| I[(MongoDB)]
    H -->|File Upload| J[Cloudinary]
    H -->|Email| K[Nodemailer]
    H -->|Payment| L[Razorpay]
    I --> M([JSON Response])
    J --> M
    K --> M
    L --> M
    M --> N[Redux\nState Update]
    N --> O([UI Re-render])

🛠️ Tech Stack

Frontend

Technology	Purpose
React 18	UI framework with hooks
React Router v6	Client-side routing & protected routes
Redux Toolkit	Global state management (auth, cart, course)
Tailwind CSS	Utility-first styling
Axios	HTTP client with interceptors
React Hook Form	Form handling & validation
Chart.js + react-chartjs-2	Instructor earnings analytics
Swiper.js	Course carousels
video-react	In-browser video player
react-hot-toast	Toast notifications
react-type-animation	Animated hero text
react-otp-input	OTP verification input UI

Backend

Technology	Purpose
Node.js + Express	REST API server
MongoDB + Mongoose	NoSQL database & ODM
JSON Web Token (JWT)	Stateless auth tokens
bcryptjs	Password hashing
Cloudinary	Cloud media storage (images & videos)
Razorpay	Payment gateway
Nodemailer	Transactional emails
otp-generator	Secure OTP generation
express-fileupload	Multipart file handling
cookie-parser	Cookie-based token support
dotenv	Environment variable management
cors	Cross-origin request handling

📂 Folder Structure

StudyNotion-main/
│
├── Client/                         # React Frontend
│   ├── public/
│   └── src/
│       ├── App.js                  # Root component & routes
│       ├── Assests/                # Static images & logos
│       ├── components/
│       │   ├── Common/             # Navbar, Footer, Spinner
│       │   └── core/
│       │       ├── Auth/           # PrivateRoute, OpenRoute
│       │       ├── Dashboard/      # My Profile, Settings,
│       │       │   │               # Cart, Enrolled Courses,
│       │       │   │               # AddCourse, MyCourses,
│       │       │   └── InstructorDashboard/
│       │       ├── HomePage/       # Hero, banners, stats
│       │       ├── Catalog/        # Course listing
│       │       └── ViewCourse/     # Video player, sidebar
│       ├── data/                   # Static data (navbar links, etc.)
│       ├── hooks/                  # Custom React hooks
│       ├── pages/                  # Page-level components
│       │   ├── Home.jsx
│       │   ├── Login.jsx
│       │   ├── Signup.jsx
│       │   ├── Dashboard.jsx
│       │   ├── CourseDetails.jsx
│       │   ├── ViewCourse.jsx
│       │   ├── Catalog.jsx
│       │   ├── About.jsx
│       │   ├── Contact.jsx
│       │   ├── ForgotPassword.jsx
│       │   ├── UpdatePassword.jsx
│       │   └── VerifyEmail.jsx
│       ├── reducer/                # Redux store setup
│       ├── slice/                  # Redux slices (auth, cart, course, etc.)
│       ├── Services/               # API call functions (axios wrappers)
│       └── utils/                  # Constants, helper functions
│
└── Server/                         # Node.js + Express Backend
    ├── index.js                    # App entry point
    ├── config/
    │   ├── database.js             # MongoDB connection
    │   └── cloudinary.js           # Cloudinary setup
    ├── controllers/
    │   ├── Auth.js                 # signup, login, sendOTP, changePassword
    │   ├── ResetPassword.js        # resetPasswordToken, resetPassword
    │   ├── Course.js               # CRUD for courses
    │   ├── Section.js              # CRUD for sections
    │   ├── SubSection.js           # CRUD for sub-sections + video upload
    │   ├── Category.js             # Category management
    │   ├── Profile.js              # User profile management
    │   ├── Payments.js             # Razorpay integration
    │   ├── RatingAndReview.js      # Rating & review logic
    │   ├── courseProgress.js       # Progress tracking
    │   └── ContactUs.js            # Contact form handler
    ├── middlewares/
    │   └── auth.js                 # JWT auth + role guards
    ├── models/
    │   ├── User.js
    │   ├── Profile.js
    │   ├── Course.js
    │   ├── Section.js
    │   ├── SubSection.js
    │   ├── Category.js
    │   ├── OTP.js
    │   ├── RatingAndReview.js
    │   └── CourseProgress.js
    ├── routes/
    │   ├── User.js                 # /api/v1/auth
    │   ├── Profile.js              # /api/v1/profile
    │   ├── Course.js               # /api/v1/course
    │   ├── Payments.js             # /api/v1/payment
    │   └── ContactUs.js            # /api/v1/contact
    ├── mail/
    │   └── templates/              # HTML email templates
    └── utils/
        ├── mailSender.js           # Nodemailer helper
        ├── imageUploader.js        # Cloudinary uploader
        └── secToDuration.js        # Duration formatter

🚀 Installation & Setup

Prerequisites

Node.js ≥ 18.x
npm ≥ 9.x
MongoDB Atlas account
Cloudinary account
Razorpay test/live keys
Gmail SMTP or any SMTP provider

1. Clone the Repository

git clone https://github.com/your-username/StudyNotion.git
cd StudyNotion

2. Server Environment Variables

Create Server/.env:

PORT=4000
MONGODB_URL=mongodb+srv://<user>:<password>@cluster.mongodb.net/studynotion

JWT_SECRET=your_super_secret_jwt_key

# Cloudinary
CLOUD_NAME=your_cloud_name
API_KEY=your_api_key
API_SECRET=your_api_secret

# Razorpay
RAZORPAY_KEY=rzp_test_xxxxxxxx
RAZORPAY_SECRET=your_razorpay_secret

# Nodemailer
MAIL_HOST=smtp.gmail.com
MAIL_USER=your_email@gmail.com
MAIL_PASS=your_app_password

3. Client Environment Variables

Create Client/.env:

REACT_APP_BASE_URL=http://localhost:4000/api/v1

4. Install Dependencies

# From root
npm install

# Install client deps
cd Client && npm install

# Install server deps
cd ../Server && npm install

5. Run the Application

# From root — runs both client and server concurrently
npm run dev

Service	URL
React Frontend	http://localhost:3000
Express Backend	http://localhost:4000

🔐 Security Practices

Practice	Implementation
Password Hashing	`bcryptjs` with salt rounds — passwords are never stored in plain text
JWT Authentication	Signed tokens validated on every protected route via `auth` middleware
Role-Based Access Control	Middleware guards: `isStudent`, `isInstructor`, `isAdmin` — enforced at route level
OTP Expiry	OTPs are stored in MongoDB with a TTL index; they auto-expire after 5 minutes
CORS Whitelist	Only approved origins (Vercel deployments + localhost) are accepted; all others are blocked
Environment Variables	All secrets (JWT, DB URI, API keys) are stored in `.env` and never committed to version control
Cookie Security	`cookie-parser` used; tokens are extracted from cookies, headers, or request body
Signature Verification	Razorpay payments are verified server-side using HMAC-SHA256 before enrollment

⚡ Performance & Optimizations

Optimization	Details
Lazy Loading	React Router enables code-splitting at the page level
Redux State Management	Centralized store avoids prop drilling and redundant API calls
CDN Media Delivery	All course videos and thumbnails are served via Cloudinary CDN for low-latency global delivery
Axios Interceptors	Centralized error handling prevents duplicate error-handling logic across services
Temp File Upload	`express-fileupload` uses `/tmp` for temporary storage before streaming to Cloudinary
MongoDB Indexing	OTP model uses a TTL index (`createdAt`) to auto-purge expired documents
Concurrent Dev Server	`concurrently` runs both React and Express in one terminal, reducing developer friction
Progress Bar (`@ramonak/react-progress-bar`)	Visual lecture progress feedback without heavy re-renders

📡 API Documentation

Base URL: http://localhost:4000/api/v1

🔐 Auth Routes — `/api/v1/auth`

Method	Endpoint	Auth	Description
`POST`	`/sendotp`	❌	Send OTP to email for verification
`POST`	`/signup`	❌	Register new user (OTP required)
`POST`	`/login`	❌	Login and receive JWT token
`POST`	`/changepassword`	✅	Change authenticated user's password
`POST`	`/reset-password-token`	❌	Generate password reset token
`POST`	`/reset-password`	❌	Reset password using token

👤 Profile Routes — `/api/v1/profile`

Method	Endpoint	Auth	Description
`DELETE`	`/deleteProfile`	✅	Delete user account
`PUT`	`/updateProfile`	✅	Update user profile details
`GET`	`/getUserDetails`	✅	Get authenticated user's details
`GET`	`/getEnrolledCourses`	✅	Get all enrolled courses
`PUT`	`/updateDisplayPicture`	✅	Upload/update profile picture
`GET`	`/instructorDashboard`	✅ Instructor	Get instructor analytics

📚 Course Routes — `/api/v1/course`

Method	Endpoint	Auth	Role	Description
`POST`	`/createCourse`	✅	Instructor	Create a new course
`POST`	`/editCourse`	✅	Instructor	Update course details
`DELETE`	`/deleteCourse`	✅	Instructor	Delete a course
`GET`	`/getAllCourses`	❌	—	Get all published courses
`POST`	`/getCourseDetails`	❌	—	Get course info & sections
`POST`	`/getFullCourseDetails`	✅	—	Get full details with videos
`GET`	`/getInstructorCourses`	✅	Instructor	Get instructor's own courses
`POST`	`/addSection`	✅	Instructor	Add section to course
`POST`	`/updateSection`	✅	Instructor	Update a section
`POST`	`/deleteSection`	✅	Instructor	Delete a section
`POST`	`/addSubSection`	✅	Instructor	Add video sub-section
`POST`	`/updateSubSection`	✅	Instructor	Update sub-section
`POST`	`/deleteSubSection`	✅	Instructor	Delete sub-section
`POST`	`/updateCourseProgress`	✅	Student	Mark a lecture complete
`POST`	`/createCategory`	✅	Admin	Create category
`GET`	`/showAllCategories`	❌	—	List all categories
`POST`	`/getCategoryPageDetails`	❌	—	Category with courses
`POST`	`/createRating`	✅	Student	Submit rating & review
`GET`	`/getAverageRating`	❌	—	Get average course rating
`GET`	`/getReviews`	❌	—	Get all reviews

💳 Payment Routes — `/api/v1/payment`

Method	Endpoint	Auth	Role	Description
`POST`	`/capturePayment`	✅	Student	Create Razorpay order
`POST`	`/verifyPayment`	✅	Student	Verify & process payment
`POST`	`/sendPaymentSuccessEmail`	✅	Student	Send payment confirmation email

📬 Contact Route — `/api/v1/contact`

Method	Endpoint	Auth	Description
`POST`	`/contactUs`	❌	Submit contact form

🌐 Deployment

StudyNotion is deployed as two separate services on Vercel.

Frontend (Vercel)

Push Client/ to a GitHub repository
Import the repo into Vercel
Set Root Directory to Client
Add environment variable: REACT_APP_BASE_URL=<your-backend-url>/api/v1
Deploy — Vercel auto-detects Create React App

Backend (Vercel / Render / Railway)

Push Server/ to GitHub
Deploy on Vercel (with vercel.json) or Render/Railway
Add all environment variables from Server/.env
Set start command: node index.js

🌐 Live URLs

Service	URL	Status
Frontend	study-notion-blue-mu.vercel.app	✅ Live
Frontend (Alt)	study-notion-git-main-arjuns-projects-c804732d.vercel.app	✅ Live
Backend API	`https://your-backend.vercel.app/api/v1`	⚙️ Self-hosted

Note: MongoDB Atlas allows connections only from whitelisted IPs. For production, whitelist 0.0.0.0/0 or your server's static IP.

👨‍💻 Author


Name	Arjun
Project	StudyNotion — Full Stack EdTech Platform
Stack	MERN (MongoDB, Express, React, Node.js)
Deployment	Vercel (Frontend + Backend)

Made with ❤️ and lots of ☕ by Arjun

⭐ Star this repo if you found it helpful!

Name		Name	Last commit message	Last commit date
Latest commit History 14 Commits
Client		Client
Server		Server
.gitignore		.gitignore
README.md		README.md
package-lock.json		package-lock.json
package.json		package.json

Folders and files

Latest commit

History

Repository files navigation

📚 StudyNotion

Live Demo

📑 Table of Contents

🎯 Project Overview

✨ Key Features

🏗️ System Architecture

🔄 Application Flow Diagram

Auth / Login Flow

Course Purchase Flow

📊 Database Schema

🔁 Request Lifecycle

🛠️ Tech Stack

Frontend

Backend

📂 Folder Structure

🚀 Installation & Setup

Prerequisites

1. Clone the Repository

2. Server Environment Variables

3. Client Environment Variables

4. Install Dependencies

5. Run the Application

🔐 Security Practices

⚡ Performance & Optimizations

📡 API Documentation

🔐 Auth Routes — /api/v1/auth

👤 Profile Routes — /api/v1/profile

📚 Course Routes — /api/v1/course

💳 Payment Routes — /api/v1/payment

📬 Contact Route — /api/v1/contact

🌐 Deployment

Frontend (Vercel)

Backend (Vercel / Render / Railway)

🌐 Live URLs

👨‍💻 Author

About

Resources

Uh oh!

Stars

Watchers

Forks

Releases

Packages 0

Uh oh!

Contributors

Uh oh!

Languages

🔐 Auth Routes — `/api/v1/auth`

👤 Profile Routes — `/api/v1/profile`

📚 Course Routes — `/api/v1/course`

💳 Payment Routes — `/api/v1/payment`

📬 Contact Route — `/api/v1/contact`

Packages