I a new to coding and certainly new to this site. I apologise advance if I offend anyone or any rules.

What should I do to further improve the code. Any suggestions would be appreciated.

This code for Node JS manages tables and orders in a local cafe.

Improvements in mind:

  • Admin identification (Using JWT)
  • Google OAuth 2 (is it better to implement on the server side or client side?)


  • Should I add Google OAuth on server side or client side?
  • I would be hosting this code for a client. Is it safe for the project to be publically available on GitHub?
const express = require("express");
const table = require("../models/tables");
const router = express.Router();
const jwt = require("jsonwebtoken");

const JWT_SECRET = process.env.JWT_SECRET;

/**----------------------------------------------------------- Create a new table ---------------------------------------------------------------------/
 * *Endpoint: "/api/table/create"
 * ! Admin only API
 * TODO: create the specified number of tables from the req body.

router.post("/create", async (req, res) => {
  try {
    const newTable = await table.create({
      tableNo: req.body.tableNo,
  } catch (error) {
    res.status(500).send("Some error occured");

/**---------------------------------------------------------- Create a new table ----------------------------------------------------------------------/
 * * Endpoint: "/api/table/book"
 * * Public API
 * @param bookTable : fetches and stores the information about the table to be booked

router.put("/book", async (req, res) => {
  try {
    let bookTable = await table.findOne({ tableNo: req.body.tableNo });

    // Checking if the table is already booked or not
    if (!bookTable.availability) {
      return res.status(200).send("Table already booked");

    //* Updating table if it is available
    bookTable.tableNo = req.body.tableNo;
    bookTable.phone = req.body.phone;
    bookTable.availability = false;

    // Creating and sending JWT.
    const data = {
      tableNo: bookTable.tableNo,
      phone: bookTable.phone,
      _id: bookTable._id,
    const authToken = jwt.sign(data, JWT_SECRET);
    res.json({ authToken });
  } catch (error) {
    res.status(500).send("Some error occured");

module.exports = router;


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.