BlackPOS : Ultimate Multipurpose Inventory Management with POS ( Point of Sale ) - Node JS + MongoDB

About

BlackPOS is a complete POS system developed using NodeJS with MongoDB.

Try our admin demo https://blackpos.kmsteams.com/login Username – admin Password – 1234

What’s Included

• Quality verified by Envato
• Complete Source Code & Database
• Easy for installation and easily can update.
• We will help you to Install & Free support
• Regular updates
• Free future updates
• Welcome for suggestions

Features

• All POS-related features with POS invoice.
• Product Management with Barcode feature.
• Order and Transaction History
• Accounts or Financial management for your business.
• Customer Management
• Supplier Management
• Coupon Management
• User Role Management
• Stock Management
• Simplified installation and configuration
• Easy deployment to production server
• Respond quickly to user actions
• Load fast and provide an offline experience
• Well, structured and clean code
• Clean endpoints
• Best performance
• Build with MVC architecture
• Handled errors carefully and explicitly
• Carefully designed to fit in any project requirements
• Easily Customizable if necessary
• Fully documented

Save 1000+ hours of development time.

Disclaimer

• Our code is designed to be fully compatible and supported only on subdomains, such as https://subdomain.yourdomainname.com. It cannot be installed on the root domain or any additional paths, like https://www.yourdomainname.com/admin. Additionally, it is not compatible with localhost or any private DNS zones.

Refund Policy

• We don’t offer a refund. (If the item is downloaded)
• Please read the description and compatibility content thoroughly before purchasing as we don’t offer a refund if you buy it by mistake.
• Be Aware: We do not sell any of our items outside the Envato market

Refund Policy

Refund requests are handled according to Envato Market Refund Rules. Please review the official policy before purchasing.

Faced with a problem? Need assistance with the product? No worries – our customer support team is always ready to help you.

• Support requests are being processed on business days from 10:00 to 18:00 (IST +05.30) within 24h to 48h of the order they were received.
• We suggest, while our team reviews your support request, please read the documentation that comes in the zip file of Codecanyon. You can download it from Codecanyon: https://codecanyon.net/downloads
• We are in IST +5:30 time zone. We address all the support queries in 5 days (Saturday & Sunday off).
• If any support ticket has no response from the item owner for 7 days, the ticket will be considered closed. If you need further assistance you can Feel free to contact us on Microsoft Teams for any kind of pre-sale inquiries or support for the product. Click here to connect on Microsoft team.
• Have pre-sales questions or concerns, please write to us via our Mail Mail
• If you like our product and support then please drop a rate and write a review at https://codecanyon.net/downloads

Change Log

✅ 1. Security And Authentication

- Hardened session handling in `app.js`.
- Moved secrets to environment variables.
- Added safer login and logout handling.
- Wrapped JWT parsing in safe guards so invalid tokens do not crash requests.
- Fixed admin-role checks so permission routing works consistently.
- Added a default development admin seed so `admin / 1234` works on fresh dev databases.

✅ 2. Route Protection And Permissions

- Protected mutating routes with `isAuth`.
- Added role-based access middleware for module permissions.
- Locked admin-only sections such as user roles, settings, and key finance routes.
- Added canonical route aliases for cleaner URLs while keeping legacy links working.
- Fixed broken or stale links in the sidebar and layout templates.

✅ 3. Schema And Validation Cleanup

- Corrected Mongoose schema field definitions from `require` to `required`.
- Added uniqueness rules for core entities such as:
  - users
  - categories
  - brands
  - units
  - suppliers
  - products
  - coupons
  - customers
  - accounts
  - orders
  - user roles
- Added input constraints such as email validation, enums, trimming, and numeric minimums.
- Refactored route-level validation to rely more on schema validation and shared helpers.
- Added a shared validation utility for required-field and duplicate-key messaging.

✅ 4. Transaction Safety And Order Numbering

- Wrapped the POS checkout and related ledger/account write paths in MongoDB transactions.
- Moved product, supplier, and account side effects into service modules.
- Replaced race-prone order counting with an atomic counter sequence.
- Added a helper for next order numbering.

✅ 5. File Uploads And Asset Safety

- Added upload type and size restrictions.
- Added safe file deletion helpers.
- Centralized upload path constants.
- Separated default assets from user uploads more clearly.
- Added safe image fallback handling across product, customer, supplier, category, brand, and shop settings views.

✅ 6. Shared Middleware, Helpers, And Services

- Added a shared footer middleware to avoid repeated shop lookups.
- Added caching for footer/shop metadata.
- Added a shared dashboard service to remove duplicated dashboard aggregation logic.
- Added shared service modules for:
  - account operations
  - POS operations
  - product operations
  - supplier operations
  - dashboard data
- Added utility helpers for:
  - navigation fallback redirects
  - aggregate-safe access
  - file safety
  - order sequencing

✅ 7. UI And UX Improvements

- Modernized sidebar and topbar styling.
- Redesigned the POS screen into a cleaner cashier-style layout.
- Improved dashboard visual hierarchy.
- Added more polished summary cards and metric modules.
- Improved table action cells, search boxes, and pagination styling.
- Restyled shared buttons across the app.
- Improved form input styling, select boxes, and file upload fields.
- Added better empty-state and error-state messages.
- Improved mobile responsiveness on key pages.
- Added clearer labels and hints for fields like:
  - `unitType`
  - `unitValue`
  - low stock threshold
  - timezone selection

✅ 8. Sidebar And Navigation Fixes

- Removed stale `widgets.html` sidebar navigation.
- Fixed sidebar permission display so admin users see the full menu consistently.
- Fixed user role and customer navigation links.
- Removed duplicate or stale DataTables initializers that caused repeated search/pagination UI.

✅ 9. Dashboard And Table Experience

- Made top dashboard cards more balanced and visually structured.
- Improved revenue/statistics presentation.
- Merged and refined revenue summary sections where appropriate.
- Added icon gradients and premium card treatments.
- Standardized table pagination appearance.
- Enabled DataTables on pages that were missing search and paging controls.

✅ 10. Dependency And Runtime Upgrade

- Upgraded the project to a modern Node LTS target.
- Removed `body-parser` and switched to Express built-in parsers.
- Upgraded major dependencies:
  - `express`
  - `mongoose`
  - `jsonwebtoken`
  - `connect-mongodb-session`
- Upgraded smaller dependencies:
  - `bcrypt`
  - `dotenv`
  - `ejs`
  - `nodemon`
  - `fast-csv`
  - `nocache`
  - `sharp`
  - `multer`
- Added `.nvmrc` and updated package engine metadata.
- Added a dependency upgrade plan document and tracked each phase.

✅ 11. Bug Fixes And Compatibility Updates

- Fixed Mongoose 9 `ObjectId` construction changes.
- Fixed Express 5 redirect compatibility issues.
- Fixed `/user/back`-style fallback navigation issues.
- Added explicit `databaseName` to Mongo session store configuration.
- Fixed route handling for optional shop settings paths.
- Fixed product subcategory API responses and edit flows.
- Fixed stock badge display and product quantity projections.
- Fixed duplicate toast behavior in POS quantity updates.
- Fixed customer transaction route redirect loops.
- Fixed missing or incorrect stock/product default image handling.