# allenkisairakesh/securex architecture

> Architecture diagram of the GitHub repository allenkisairakesh/securex, generated by GitDiagram from its file tree, README and a sample of source files (last updated 2026-09-25). It is an AI-made overview: check details against the source.

- Interactive diagram: https://gitdiagram.com/allenkisairakesh/securex
- Repository: https://github.com/allenkisairakesh/securex

## Overview

SecureX is an authentication-as-a-service platform: an end user signs in or registers through its SPA or embeddable widget, receives a token, and uses authenticated dashboard/API workflows for identity administration, keys, webhooks, audit logs, and security. The Express entry point dispatches API requests through authentication middleware to domain routes, which persist state in MongoDB. The graph preserves README capabilities, including unsampled routes and integrations at their documented directory paths; their internal wiring is not inferred beyond documented behavior.

Main entry points: [`server.js`](https://github.com/allenkisairakesh/securex/blob/main/server.js) (Express entrypoint), [`middleware/auth.js`](https://github.com/allenkisairakesh/securex/blob/main/middleware/auth.js) (JWT authorization), [`routes/webhooks.js`](https://github.com/allenkisairakesh/securex/blob/main/routes/webhooks.js) (Webhook management), [`public/js`](https://github.com/allenkisairakesh/securex/tree/main/public/js) (Dashboard SPA)

## Diagram (Mermaid)

```mermaid
flowchart TD

subgraph group_client["Clients"]
  node_spa["Dashboard SPA"]
  node_widget["Login widget SDK<br/>[securex.js]"]
  node_authui["Auth pages<br/>[auth.js]"]
  node_webui["Webhook console<br/>[webhooks.js]"]
  node_docsui["Developer hub<br/>[docs.js]"]
  node_api["API client<br/>[api.js]"]
end

subgraph group_server["API and Security"]
  node_server["Express entrypoint<br/>[server.js]"]
end

subgraph group_identity["Identity and Access"]
  node_authroutes["Authentication<br/>[auth.js]"]
  node_authmw["JWT authorization<br/>[auth.js]"]
  node_keys["Scoped API keys<br/>[keys.js]"]
  node_userstore[("User records<br/>[User.js]")]
  node_keystore[("API key records<br/>[ApiKey.js]")]
end

subgraph group_operations["Management and Audit"]
  node_users["User directory<br/>[users.js]"]
  node_dashboard["Analytics dashboard<br/>[dashboard.js]"]
  node_webhooks["Webhook management<br/>[webhooks.js]"]
  node_audit[("Audit records<br/>[ActivityLog.js]")]
  node_webhookstore[("Webhook records<br/>[Webhook.js]")]
end

node_enduser(("End user"))
node_integrator(("Integrating app"))
node_mongodb[("MongoDB")]
node_webhooktarget(("Webhook endpoint"))

node_enduser -->|"uses"| node_spa
node_integrator -->|"embeds"| node_widget
node_widget -->|"posts credentials"| node_server
node_spa -->|"renders"| node_authui
node_spa -->|"renders"| node_webui
node_spa -->|"renders"| node_docsui
node_authui -->|"submits auth"| node_api
node_webui -->|"manages webhooks"| node_api
node_api -->|"sends API requests"| node_server
node_server -->|"dispatches auth"| node_authroutes
node_server -->|"dispatches users"| node_users
node_server -->|"dispatches keys"| node_keys
node_server -->|"dispatches stats"| node_dashboard
node_server -->|"dispatches webhooks"| node_webhooks
node_authroutes -->|"verifies tokens"| node_authmw
node_users -->|"verifies tokens"| node_authmw
node_keys -->|"verifies tokens"| node_authmw
node_dashboard -->|"verifies tokens"| node_authmw
node_webhooks -->|"verifies tokens"| node_authmw
node_authmw -->|"loads identity"| node_userstore
node_authroutes -->|"reads and writes"| node_userstore
node_users -->|"manages identities"| node_userstore
node_keys -->|"manages keys"| node_keystore
node_webhooks -->|"manages subscriptions"| node_webhookstore
node_dashboard -->|"reads activity"| node_audit
node_authroutes -->|"records auth events"| node_audit
node_webhooks -->|"records changes"| node_audit
node_userstore -->|"persists"| node_mongodb
node_keystore -->|"persists"| node_mongodb
node_webhookstore -->|"persists"| node_mongodb
node_audit -->|"persists"| node_mongodb
node_webhooks -.->|"test ping"| node_webhooktarget

click node_spa "https://github.com/allenkisairakesh/securex/tree/main/public/js"
click node_widget "https://github.com/allenkisairakesh/securex/blob/main/public/embed/securex.js"
click node_authui "https://github.com/allenkisairakesh/securex/blob/main/public/js/pages/auth.js"
click node_webui "https://github.com/allenkisairakesh/securex/blob/main/public/js/pages/webhooks.js"
click node_docsui "https://github.com/allenkisairakesh/securex/blob/main/public/js/pages/docs.js"
click node_api "https://github.com/allenkisairakesh/securex/blob/main/public/js/api.js"
click node_server "https://github.com/allenkisairakesh/securex/blob/main/server.js"
click node_authroutes "https://github.com/allenkisairakesh/securex/blob/main/routes/auth.js"
click node_authmw "https://github.com/allenkisairakesh/securex/blob/main/middleware/auth.js"
click node_users "https://github.com/allenkisairakesh/securex/blob/main/routes/users.js"
click node_keys "https://github.com/allenkisairakesh/securex/blob/main/routes/keys.js"
click node_dashboard "https://github.com/allenkisairakesh/securex/blob/main/routes/dashboard.js"
click node_webhooks "https://github.com/allenkisairakesh/securex/blob/main/routes/webhooks.js"
click node_audit "https://github.com/allenkisairakesh/securex/blob/main/models/ActivityLog.js"
click node_userstore "https://github.com/allenkisairakesh/securex/blob/main/models/User.js"
click node_keystore "https://github.com/allenkisairakesh/securex/blob/main/models/ApiKey.js"
click node_webhookstore "https://github.com/allenkisairakesh/securex/blob/main/models/Webhook.js"

classDef toneNeutral fill:#f8fafc,stroke:#334155,stroke-width:1.5px,color:#0f172a
classDef toneBlue fill:#dbeafe,stroke:#2563eb,stroke-width:1.5px,color:#172554
classDef toneAmber fill:#fef3c7,stroke:#d97706,stroke-width:1.5px,color:#78350f
classDef toneMint fill:#dcfce7,stroke:#16a34a,stroke-width:1.5px,color:#14532d
classDef toneRose fill:#ffe4e6,stroke:#e11d48,stroke-width:1.5px,color:#881337
classDef toneIndigo fill:#e0e7ff,stroke:#4f46e5,stroke-width:1.5px,color:#312e81
classDef toneTeal fill:#ccfbf1,stroke:#0f766e,stroke-width:1.5px,color:#134e4a
class node_spa,node_widget,node_authui,node_webui,node_docsui,node_api,node_enduser toneBlue
class node_server,node_mongodb toneAmber
class node_authroutes,node_authmw,node_keys,node_userstore,node_keystore,node_webhooktarget toneMint
class node_users,node_dashboard,node_webhooks,node_audit,node_webhookstore toneRose
class node_integrator toneIndigo
```

## Components

### Clients

- [Dashboard SPA](https://github.com/allenkisairakesh/securex/tree/main/public/js): `public/js`
- [Login widget SDK](https://github.com/allenkisairakesh/securex/blob/main/public/embed/securex.js): `public/embed/securex.js`
- [Auth pages](https://github.com/allenkisairakesh/securex/blob/main/public/js/pages/auth.js): `public/js/pages/auth.js`
- [Webhook console](https://github.com/allenkisairakesh/securex/blob/main/public/js/pages/webhooks.js): `public/js/pages/webhooks.js`
- [Developer hub](https://github.com/allenkisairakesh/securex/blob/main/public/js/pages/docs.js): `public/js/pages/docs.js`
- [API client](https://github.com/allenkisairakesh/securex/blob/main/public/js/api.js): `public/js/api.js`

### API and Security

- [Express entrypoint](https://github.com/allenkisairakesh/securex/blob/main/server.js): `server.js`

### Identity and Access

- [Authentication](https://github.com/allenkisairakesh/securex/blob/main/routes/auth.js): `routes/auth.js`
- [JWT authorization](https://github.com/allenkisairakesh/securex/blob/main/middleware/auth.js): `middleware/auth.js`
- [Scoped API keys](https://github.com/allenkisairakesh/securex/blob/main/routes/keys.js): `routes/keys.js`
- [User records](https://github.com/allenkisairakesh/securex/blob/main/models/User.js): `models/User.js`
- [API key records](https://github.com/allenkisairakesh/securex/blob/main/models/ApiKey.js): `models/ApiKey.js`

### Management and Audit

- [User directory](https://github.com/allenkisairakesh/securex/blob/main/routes/users.js): `routes/users.js`
- [Analytics dashboard](https://github.com/allenkisairakesh/securex/blob/main/routes/dashboard.js): `routes/dashboard.js`
- [Webhook management](https://github.com/allenkisairakesh/securex/blob/main/routes/webhooks.js): `routes/webhooks.js`
- [Audit records](https://github.com/allenkisairakesh/securex/blob/main/models/ActivityLog.js): `models/ActivityLog.js`
- [Webhook records](https://github.com/allenkisairakesh/securex/blob/main/models/Webhook.js): `models/Webhook.js`

### Other components

- **End user**
- **Integrating app**
- **MongoDB**
- **Webhook endpoint**

## Connections

- End user → Dashboard SPA: uses
- Integrating app → Login widget SDK: embeds
- Login widget SDK → Express entrypoint: posts credentials
- Dashboard SPA → Auth pages: renders
- Dashboard SPA → Webhook console: renders
- Dashboard SPA → Developer hub: renders
- Auth pages → API client: submits auth
- Webhook console → API client: manages webhooks
- API client → Express entrypoint: sends API requests
- Express entrypoint → Authentication: dispatches auth
- Express entrypoint → User directory: dispatches users
- Express entrypoint → Scoped API keys: dispatches keys
- Express entrypoint → Analytics dashboard: dispatches stats
- Express entrypoint → Webhook management: dispatches webhooks
- Authentication → JWT authorization: verifies tokens
- User directory → JWT authorization: verifies tokens
- Scoped API keys → JWT authorization: verifies tokens
- Analytics dashboard → JWT authorization: verifies tokens
- Webhook management → JWT authorization: verifies tokens
- JWT authorization → User records: loads identity
- Authentication → User records: reads and writes
- User directory → User records: manages identities
- Scoped API keys → API key records: manages keys
- Webhook management → Webhook records: manages subscriptions
- Analytics dashboard → Audit records: reads activity
- Authentication → Audit records: records auth events
- Webhook management → Audit records: records changes
- User records → MongoDB: persists
- API key records → MongoDB: persists
- Webhook records → MongoDB: persists
- Audit records → MongoDB: persists
- Webhook management → Webhook endpoint: test ping