From 90bb3dbeda7719b8663e35a6c919d2ee61bc18fa Mon Sep 17 00:00:00 2001
From: OmkarHase-11 <haseomkar2077@gmail.com>
Date: Thu, 4 Jun 2026 14:04:35 +0530
Subject: [PATCH] Add safe fallback configuration for backend env variables

---
 backend/controllers/Authcontroller.js | 14 ++++++++------
 backend/server.js                     |  6 ++++--
 2 files changed, 12 insertions(+), 8 deletions(-)

diff --git a/backend/controllers/Authcontroller.js b/backend/controllers/Authcontroller.js
index 166e005..7d5b59c 100644
--- a/backend/controllers/Authcontroller.js
+++ b/backend/controllers/Authcontroller.js
@@ -3,6 +3,8 @@ const bcrypt = require("bcryptjs");
 const jwt = require("jsonwebtoken");
 const crypto = require("crypto");
 const nodemailer = require("nodemailer");
+const JWT_SECRET =
+  process.env.JWT_SECRET || "fallback_development_secret_key";
 
 exports.register = async (req, res) => {
   try {
@@ -33,9 +35,9 @@ exports.register = async (req, res) => {
     });
 
     // Generate Token
-    const token = jwt.sign({ id: user._id }, process.env.JWT_SECRET, {
-      expiresIn: "1h",
-    });
+    const token = jwt.sign({ id: user._id }, JWT_SECRET, {
+  expiresIn: "1h",
+});
 
     // FIX: Send a response
     res.status(201).json({
@@ -59,9 +61,9 @@ exports.login = async (req, res) => {
     if (!isMatch)
       return res.status(400).json({ message: "Invalid credentials" });
 
-    const token = jwt.sign({ id: user._id }, process.env.JWT_SECRET, {
-      expiresIn: "1h",
-    });
+    const token = jwt.sign({ id: user._id }, JWT_SECRET, {
+  expiresIn: "1h",
+});
 
     res.status(200).json({
       message: "Login successful",
diff --git a/backend/server.js b/backend/server.js
index 88d2ccb..59e218b 100644
--- a/backend/server.js
+++ b/backend/server.js
@@ -8,6 +8,9 @@ const inquiryRoutes = require('./routes/inquiryRoutes.js');
 const contactRoutes = require('./routes/contactRoutes.js');
 dotenv.config();
 const app = express();
+const PORT = process.env.PORT || 5000;
+const MONGO_URL =
+  process.env.MONGO_URL || "mongodb://127.0.0.1:27017/school_website";
 app.use(cors());
 app.use(express.json());
 
@@ -20,7 +23,7 @@ app.use("/api/contact", contactRoutes);
 // connect to mongodb with proper try-catch
 async function connectDB() {
   try {
-    await mongoose.connect(process.env.MONGO_URL);
+    await mongoose.connect(MONGO_URL);
     console.log(" connected to mongodb");
   } catch (error) {
     console.log(" Database connection failed:", error.message);
@@ -31,7 +34,6 @@ async function connectDB() {
 
 connectDB();
 
-const PORT = process.env.PORT || 5000;
 
 // Start server with error handling
 app