AMarketPlace - All in one Multi-Vendor Digital Products Marketplace | React & PostgreSQL

AMarketPlace is a production-ready, full-stack Multi-Vendor Digital Marketplace SaaS Platform built with the latest Next.js 16 (App Router), Tailwind CSS, React 19, and PostgreSQL.

Launch a premium digital code store similar to CodeCanyon, ThemeForest, or Creative Market. AMarketPlace is engineered for high performance using direct, lightweight PostgreSQL queries via the pg package, completely eliminating heavy ORM overhead. It features a robust Role-Based Access Control (RBAC) system, multi-vendor dashboards, verified purchases, automatic licensing, and a built-in helpdesk.

---

Top Features

Multi-Vendor Seller Ecosystem

Empower developers and creators to register, apply to become authors, and set up their digital storefronts. Authors can publish code packages, upload product versions (ZIP), write markdown documentation, and manage pricing tiers (Regular, Extended, and Premium).

Comprehensive Admin Control Panel

Complete control over your platform without touching code. Review and moderate product listings, approve author applications, process withdrawal payout requests, manage user accounts, check audit/security logs, and update system-wide settings in real-time.

Secure Custom Authentication & Gated Middleware

Enterprise-ready custom session management. Powered by JWT tokens stored in secure cookies with Next.js Middleware route protection. Automatic gating prevents unauthorized access to Admin, Author, and Buyer Dashboard pages based on user roles.

Helpdesk Support Ticketing System

Deliver support directly within the platform. Buyers can create support tickets categorized by topic (Technical, Billing, Design, Database) and set priority levels. Staff and authors can reply in real-time to resolve customer queries.

Direct Buyer-Author Messaging Engine

Facilitate transactions and pre-sale questions. An integrated conversation module allows buyers to open direct messages with authors, negotiate deals, request custom edits, or ask technical questions before and after buying.

Automatic License Verification

Safeguard digital products. Every successful purchase automatically generates a unique license key, logs download attempts in the database, and tracks license active/inactive status to prevent unauthorized sharing of code resources.

Native Session & Visitor Analytics

Analyze performance with built-in visitor metrics. The system registers individual visitor sessions, tracks browser user-agent types, and records project page views. Admins and authors can inspect daily, weekly, and monthly conversion metrics.

Nodemailer SMTP Transactional Emails

Deliver automated platform notifications. Send transactional purchase receipts, password reset links, and registration verification emails. Configured dynamically through the database settings panel using SMTP connection pools.

---

Role-Based Access Control (RBAC) & Security

Security and access policies built-in:

• Route Gating Middleware: Next.js middleware guards routes like /admin/* and /author/*, redirecting users without verified roles to the buyer dashboard.
• Safe Session Verification: Uses signed JWT session cookies containing user roles, preventing cookie tampering or session hijacking.
• Bcrypt Password Hashing: Secure storage of user authentication data using industry-standard bcrypt algorithm password hashes.
• Direct Database Security: Database queries parameterized to prevent SQL injection vulnerabilities.

---

Dynamic Settings & Financial Control

Complete control over system variables directly from the dashboard:

• Plan & Commission Configurations: Set global commission cuts (e.g., 70% to authors, 30% to platform) processed automatically upon purchase.
• Multi-Currency Symbol Settings: Easily adjust the primary platform currency and set real-time exchange rates (e.g., USD-to-INR conversions).
• SMTP Gateways: Configure email host, port, username, password, and sender address dynamically.
• Author Payouts Control: Review withdrawal requests, manage payout details (PayPal email, banking credentials), and mark requests as pending, approved, or rejected.
• Audit Logging: Real-time logging of user activity and system events for easy moderation.

---

Pre-configured Marketplace Categories

Fully prepared stack categories ready to organize templates and scripts:

• JavaScript: Code snippets, libraries, visual plugins, and games.
• React / Next.js: Modern UI components, dashboards, and SaaS starters.
• WordPress: Custom themes, builders, and custom CMS extensions.
• PHP Scripts: Laravel boilerplates, backend APIs, and web apps.
• HTML5 / CSS: Responsive design pages, CSS stylesheets, and design portfolios.
• Mobile Apps: Native templates, Expo bundles, and Flutter modules.
• Admin Templates: Functional developer panels, dark mode layouts, and charts.

---

Technical Stack

• Framework: Next.js 16 (App Router)
• Frontend: React 19, Tailwind CSS, Shadcn UI, Lucide Icons
• Charts & Data: Recharts, Date-fns
• Database: PostgreSQL via raw pg pool client connection (optimized direct queries with no ORM wrappers)
• Authentication: Custom JWT token session verification with secure cookie management
• Language: 100% TypeScript
• Email System: SMTP mail routing via Nodemailer

---

Demo Credentials

Admin Account:

• Email: admin@demo.com
• Password: password123

Author Account:

• Email: author@demo.com
• Password: password123

User Account:

• Email: user@demo.com
• Password: password123

---

Why Choose AMarketPlace?

• Direct Database Performance: Bypasses heavy ORMs like Prisma or Sequelize. Uses raw SQL pool connections via the pg package for extreme query speed.
• Ready-to-Deploy Seed Data: Comes pre-packaged with full demo seeds including test buyers, authors, products, tickets, orders, reviews, and detailed analytics history.
• Clean Single-File Migration: Simple database workflow. The entire database structure is defined in a single file: /database/schema.sql, which is run via npm run migrate.
• Developer-First Codebase: 100% TypeScript typed, clean components directory structure, reusable hooks, and clear routing separation.
• Custom Auth Autonomy: Fully independent authentication logic. No dependency on external SaaS auth like Supabase Auth, Firebase, or Auth0.

What You Get

• Full Next.js source code project
• Database schema SQL and migrate runner script
• Seed configuration scripts
• Detailed directory documentation

---

Business Benefits & ROI

• Launch Your Code Shop Instantly: Set up a fully functional multi-vendor script marketplace in minutes instead of months of custom development.
• Generate Recurring Commissions: Automatically retain a percentage of each transaction processed on the platform.
• Engage Customers Directly: Direct buyer-to-author ticketing and chat resolves issues faster, reducing refunds and customer churn.
• Track Growth Metrics: Measure sales volumes, author signups, page views, and visitor demographics directly to optimize marketing spend.

Technical Workflows

• Instant Database Provisioning: Running npm run migrate compiles the TypeScript migration script, reads the raw schema.sql, executes table generation, index declarations, triggers, and default site settings directly against PostgreSQL.
• Middleware Authentication Guarding: Incoming request -> Middleware decrypts session JWT cookie -> Matches user roles (buyer, author, admin) -> Automatically allows access or redirects to appropriate dashboard pages.
• Transactional Email Dispatch: Action triggered (e.g. user signup/reset) -> Fetches current SMTP configs from `site_settings` table -> Creates pool connection -> Dispatches email notifications.
• Native Visitor Session Logging: Visitor visits site -> Middleware extracts hashed IP and user agent -> Checks if session already exists for current date -> If not, inserts new visitor session in database for charting.

---

Frequently Asked Questions (FAQ)

• Q: How do database migrations work?
  A: Deployed using the raw pg package. Run npm run migrate to execute the runner, reading schema.sql and building your database structures instantly.
• Q: How is authorization managed?
  A: Authorization is enforced via user roles stored in the user_roles table. The Next.js middleware decrypts the session cookie and verifies role permissions against requested routes.
• Q: Can I add custom categories?
  A: Yes, categories can be created, updated, and deleted dynamically in the admin settings dashboard, or seeded directly via `schema.sql`.
• Q: What payment integrations are available?
  A: AMarketPlace supports recording payments from major providers like Stripe, PayPal, and Razorpay.

---

Requirements

• Node.js 18+
• PostgreSQL Database (Supabase, Neon, or local instance)
• Direct database connection string configured in .env