README

!
Hackathon Starter
=======================



Live Demo: Link

Jump to What's new?

A boilerplate for Node.js web applications.

If you have attended any hackathons in the past, then you know how much time it takes to get a project started: decide on what to build, pick a programming language, pick a web framework, pick a CSS framework. A while later, you might have an initial project up on GitHub, and only then can other team members start contributing. Or how about doing something as simple as _Sign in with Facebook_ authentication? You can spend hours on it if you are not familiar with how OAuth 2.0 works.

When I started this project, my primary focus was on simplicity and ease of use.
I also tried to make it as generic and reusable as possible to cover most use cases of hackathon web apps, without being too specific. In the worst case, you can use this as a learning guide for your projects, if for example you are only interested in Sign in with Google authentication and nothing else.

 Testimonials

 "Nice! That README alone is already gold!"
 — Adrian Le Bas

 "Awesome. Simply awesome."
 — Steven Rueter

 "I'm using it for a year now and many projects, it's an awesome boilerplate and the project is well maintained!"
 — Kevin Granger

 "Small world with Sahat's project. We were using his hackathon starter for our hackathon this past weekend and got some prizes. Really handy repo!"
 — Interview candidate for one of the companies I used to work with.

Modern Theme

!

Flatly Bootstrap Theme

!

API Examples

!

 Table of Contents

- Features
- Prerequisites
- Getting Started
- HTTPS Proxy
- Obtaining API Keys
- Web Analytics
- Open Graph
- Project Structure
- List of Packages
- Useful Tools and Resources
- Recommended Design Resources
- Recommended Node.js Libraries
- Recommended Client-side Libraries
- Using AI Assistants
- FAQ
- How It Works
- Cheatsheets
  - ES6
  - JavaScript Date
  - Mongoose Cheatsheet
- Deployment
- Production
- Changelog
- Contributing
- License

 Features

- Login
  - Local Authentication Sign in with Email and Password, Passwordless, Passkey / Biometrics
  - OAuth 2.0 Authentication: Sign in with Google, Microsoft, Facebook, LinkedIn, X (Twitter), Twitch, GitHub, Discord
- User Profile and Account Management
  - Gravatar
  - Profile Details
  - Password management (Change, Reset, Forgot)
  - Verify Email
  - Two-Factor Authentication (2FA) Email codes and Authenticator apps
  - Link multiple OAuth provider accounts to one account
  - OAuth token revocation
  - Delete Account
- Contact Form (powered by SMTP via Mailgun, AWS SES, etc.)
- File upload
- Device camera
- AI Examples and Boilerplates
  - AI Agent ReAct (Reasoning + Acting) with tool calling, MongoDB session persistence, and input guardrails
  - RAG with semantic and embedding caching
  - Text and Image LLMs - GPT-OSS, Qwen3.6
  - Support for a range of foundational and embedding models (Qwen, DeepSeek, Kimi, MiniMax, OpenAI OSS, Mistral, Sentence Transform

Top issues

Latest release

New AI and Integration Features

- AI: AI Agent (ReAct: Reasoning+Acting) boilerplate with LangChain as a starting point for AI Agent development with support for:
  - Tool execution with automatic retry middleware for transient failures
  - MongoDB session persistence for chat history for authenticated users
  - Input guardrails for safety against prompt injection/jailbreak (Llama Guard 4)
  - Conversation summarization for long conversations to stay within context limits
  - Real-time streaming for live response chat experience using Server-Sent Events (SSE)
  - Streaming of the Agen