Secure Express.js API Build

I’m finalising a Next.js front-end and now need a seasoned Express.js developer to stand up the entire backend layer. The priorities are clear:

• Robust RESTful APIs that let the React pages in my Next.js app fetch and mutate data quickly.
• Solid user authentication (JWT or session-based) implemented with security best-practices in mind.
• Clean database management through an ORM—Prisma, Sequelize or another tool you favour—so the code stays agnostic to whether we ultimately sit on SQL or NoSQL.

Security is critical: I expect input validation, rate-limiting and other OWASP-aligned measures baked in from the start rather than patched on later.

Deliverables:
1. Documented Express.js codebase with all API routes, middleware and error handling.
2. Authentication module supporting signup, login, token refresh and protected routes.
3. ORM models, migrations and sample seed data.
4. A concise README covering environment variables, setup scripts and how the backend integrates with my existing Next.js repo.
5. Postman (or similar) collection for quick endpoint testing.

I’ll review by spinning up the server locally, running integration tests from the collection, and checking that unauthenticated requests are blocked while authorised users can access protected resources.

If you thrive on building secure, maintainable backends that plug seamlessly into modern React stacks, let’s talk timelines and get coding.