Develop Real-Time Used Car Bidding Platform

Project Brief: AutoBid-MY — Used Car Real-Time Bidding Marketplace
1. Project Overview

AutoBid-MY is a real-time used-car auction platform inspired by Carsome, designed for the Malaysian market.
The system allows users, agents, and admins to interact in a seamless ecosystem with real-time bidding, wallet balance management, FPX & USDT payments, WebPush notifications, and an admin analytics dashboard.

2. Core Technology Stack

Frontend: Vue 3 + Vite + Tailwind CSS + PWA

Backend: Node.js + Express.js + MongoDB + Socket.IO

Authentication: JWT (Access + Refresh) + RBAC (Role-Based Access Control)

Payments: FPX (Billplz API) + USDT (TRON blockchain)

3. Roles & Permissions
Role Key Capabilities
- User Register / Login / Wallet top-up (FPX or USDT) / Participate in multiple concurrent bids (auto-freeze funds) / View results / Subscribe to PWA notifications
- Agent Register / Submit for approval / Upload car listings (Brand · Model · Year · Mileage · Images · Base Price · Deadline) / View auction progress & revenue
- Admin Approve users & agents / Approve car listings / Monitor live auctions / Handle settlement & 10 % platform commission / Push notifications / View financial & analytics dashboard

4. Main System Modules
4.1 Authentication Module

Register / Login / Logout / Refresh Token

Role-based middleware (RBAC)

Password hashing (bcrypt)

4.2 Wallet Module

Top-up via FPX or USDT

Withdraw request (admin approval)

Wallet logs history (paginated)

Auto sync balance & frozen amounts

4.3 Auction Module

Agents upload cars for auction

Users join auctions and bid in real time (Socket.IO)

Highest bid updates broadcast instantly

Countdown timer per vehicle

Auto settlement job when deadline expires

Bid history per user and per vehicle

4.4 Admin Module

Dashboard overview cards:

Total Users / Active Agents

Ongoing Auctions / Total Sales / Platform Revenue

User & Agent approval interface

Car listing approval page

Financial summary table

Push announcement form (WebPush)

4.5 PWA Push Module

Service Worker registration + manifest.json

Subscribe/unsubscribe WebPush notifications

Backend sends web-push notifications to users and agents

Offline cache for critical pages

10. Security Requirements

Use .env for credentials

bcrypt password hashing

JWT token expiry + refresh

CORS + Rate-limit middleware

Signature validation for FPX IPN

All wallet transactions logged and auditable

11. Admin Analytics Dashboard

Real-time overview cards:

Total Users / Active Agents

Live Auctions Count

Total Sales Value

Platform Commission Revenue

Charts (live update via WebSocket)

Table views for Users, Agents, Cars, Transactions