User Browser
│
│ HTTPS Requests
▼
Angular Frontend (SPA) / Web UI
Vercel Cloud
• Authentication UI
• Task Management UI
• API Communication Layer
│
│ REST API Requests
│ (CORS Enabled)
▼
Node.js / Express (Backend Service)
Railway Cloud
• API Endpoints
• JWT Authentication
• Business Logic
• CORS Configuration
│
│ Database Queries
▼
MongoDB Atlas
Cloud Database
• Todo Task Storage
• User Accounts
• Persistent Data Layer
- This architecture reflects real-world deployment models used in modern cloud applications.
- Benefits include:
• Independent service deployment
• Horizontal scalability
• Separation of presentation and data layers
• Flexible cloud hosting strategies
Distributed Architecture Design
This application follows a distributed cloud architecture where the frontend, backend, and database are deployed as independent services.
- How I structure apps for maintainability, security, and fast iteration.
Separation of Concerns
- UI components stay thin; services handle orchestration; repositories isolate data access; configuration is
- environment-driven for safe deployment.
- How I structure apps for maintainability, security, and fast iteration.
Separation of Concerns
- UI components stay thin; services handle orchestration; repositories isolate data access; configuration is
- environment-driven for safe deployment.
Frontend Layer
The Angular single-page application is deployed on Vercel, providing fast global content delivery and static hosting.
Responsibilities:
• UI rendering
• User interaction
• API communication
• Authentication handling
Backend Layer
The backend API is implemented using
Node.js and Express and deployed on
Railway.
Responsibilities:
• REST API endpoints
• Business logic processing
• JWT authentication
• Cross-Origin Resource Sharing (CORS) management
Data Layer
Application data is stored in MongoDB Atlas, a managed cloud database service.
Responsibilities:
• Persistent task storage
• User account data
• Query performance and indexing
Security Considerations - Security & Integration Mindset
- Because the frontend and backend services are hosted on different domains,
- CORS configuration was implemented to allow secure communication between trusted origins.
- All requests are transmitted over HTTPS, ensuring encrypted communication between system components.
- JWT-first auth patterns, CORS-aware FE/BE separation, and secure configuration practices suited for Enterprise system
- and HR/Payroll domains