feat: verify mongo connection on config update and expose server IP

Author: yash-pouranik

backend/app.js

@@ -8,6 +8,7 @@ const rateLimit = require('express-rate-limit');
 const app = express();
 app.set('trust proxy', 1);
 const GC = require('./utils/GC');
+const { getPublicIp } = require('./utils/network');
 
 // Middleware
 app.use(cors());
@@ -64,8 +65,14 @@ app.use('/api/auth', dashboardLimiter, authRoute); // Developer Auth
 app.use('/api/projects', dashboardLimiter, projectRoute); // Project Mgmt
 app.use('/api/userAuth', limiter, logger, userAuthRoute);
 app.use('/api/data', limiter, cors(adminCorsOptions), logger, dataRoute);
+app.use('/api/data', limiter, cors(adminCorsOptions), logger, dataRoute);
 app.use('/api/storage', limiter, cors(adminCorsOptions), logger, storageRoute);
 
+app.get('/api/server-ip', async (req, res) => {
+    const ip = await getPublicIp();
+    res.json({ ip });
+});
+
 // Test Route
 app.get('/', (req, res) => {
     res.status(200).json({ status: "success", message: "urBackend API is running 🚀" })

backend/controllers/project.controller.js

@@ -12,6 +12,7 @@ const { getConnection } = require("../utils/connection.manager");
 const { getCompiledModel } = require("../utils/injectModel")
 const { storageRegistry } = require("../utils/registry");
 const { deleteProjectByApiKeyCache, setProjectById, getProjectById, deleteProjectById } = require("../services/redisCaching");
+const { getPublicIp } = require("../utils/network");
 
 
 
@@ -143,6 +144,27 @@ module.exports.updateExternalConfig = async (req, res) => {
             // Naye model structure ke hisaab se save karein
             updateData['resources.db.config'] = encrypt(JSON.stringify({ dbUri }));
             updateData['resources.db.isExternal'] = true;
+
+            // --- VERIFY CONNECTION ---
+            console.log("Verifying connection to:", projectId);
+            try {
+                const tempConn = mongoose.createConnection(dbUri, { serverSelectionTimeoutMS: 5000 });
+                await tempConn.asPromise();
+                await tempConn.close();
+            } catch (connErr) {
+                console.error("Verification Connection Failed:", connErr.message);
+                let errorMsg = "Could not connect to the provided MongoDB URI.";
+
+                if (connErr.message.includes("Server selection timed out") || connErr.message.includes("Could not connect")) {
+                    const serverIp = await getPublicIp();
+                    errorMsg = `Access Denied: Please whitelist Server IP [${serverIp}] in MongoDB Atlas.`;
+                } else {
+                    errorMsg += " " + connErr.message;
+                }
+
+                return res.status(400).json({ error: errorMsg });
+            }
+            // -------------------------
         }
 
         // 3. Storage Config Encryption

backend/utils/connection.manager.js

@@ -1,4 +1,5 @@
 const { registry } = require("./registry");
+const { getPublicIp } = require("./network");
 const Project = require("../models/Project");
 const { decrypt } = require("./encryption");
 const mongoose = require("mongoose");
@@ -39,9 +40,20 @@ async function getConnection(projectId) {
         console.log(`✅ External DB connected: ${projectId}`);
     });
 
+    try {
+        await connection.asPromise();
+    } catch (err) {
+        console.error("❌ Initial Connection Failed:", err.message);
+        if (err.message.includes("Server selection timed out") || err.message.includes("Could not connect")) {
+            const serverIp = await getPublicIp();
+            throw new Error(`Access Denied: Please whitelist Server IP [${serverIp}] in MongoDB Atlas.`);
+        }
+        throw err;
+    }
+
     connection.on("error", (err) => {
         console.error("❌ Connection error [%s]:", projectId, err);
-        registry.delete(key); 
+        registry.delete(key);
     });
 
     connection.on("close", () => {

backend/utils/network.js

@@ -0,0 +1,26 @@
+// Node 18+ has global fetch, so no import needed
+
+let cachedIp = null;
+let lastFetch = 0;
+
+async function getPublicIp() {
+    // Cache IP for 1 hour to avoid spamming the IP service
+    const now = Date.now();
+    if (cachedIp && (now - lastFetch < 3600000)) {
+        return cachedIp;
+    }
+
+    try {
+        const response = await fetch('https://api.ipify.org?format=json');
+        if (!response.ok) throw new Error('Failed to fetch IP');
+        const data = await response.json();
+        cachedIp = data.ip;
+        lastFetch = now;
+        return cachedIp;
+    } catch (error) {
+        console.error("Error fetching public IP:", error.message);
+        return "Unavailable";
+    }
+}
+
+module.exports = { getPublicIp };

frontend/src/pages/CreateCollection.jsx

@@ -14,7 +14,9 @@ function CreateCollection() {
 
     const [name, setName] = useState('');
     const [fields, setFields] = useState([
-        { key: 'id', type: 'String', required: true } // Default ID field suggestion
+        { key: 'username', type: 'String', required: true },
+        { key: 'email', type: 'String', required: true },
+        { key: 'password', type: 'String', required: true },
     ]);
     const [loading, setLoading] = useState(false);
 

frontend/src/pages/ProjectSettings.jsx

@@ -3,7 +3,7 @@ import { useParams, useNavigate } from "react-router-dom";
 import axios from "axios";
 import { useAuth } from "../context/AuthContext";
 import toast from "react-hot-toast";
-import { Trash2, AlertTriangle, Save, CheckCircle } from "lucide-react";
+import { Trash2, AlertTriangle, Save, CheckCircle, Copy, Server } from "lucide-react";
 import { API_URL } from "../config";
 import ConfirmationModal from "./ConfirmationModal";
 
@@ -308,11 +308,31 @@ function DatabaseConfigForm({ project, projectId, token }) {
   const isConfigured = project?.resources?.db?.isExternal || false;
   const [showForm, setShowForm] = useState(!isConfigured);
 
+  const [serverIp, setServerIp] = useState(null);
+
   useEffect(() => {
     const configured = project?.resources?.db?.isExternal || false;
     setShowForm(!configured);
+
+    // Fetch Server IP
+    const fetchIp = async () => {
+      try {
+        const res = await axios.get(`${API_URL}/api/server-ip`);
+        setServerIp(res.data.ip);
+      } catch (e) {
+        console.error("Failed to fetch server IP");
+      }
+    };
+    fetchIp();
   }, [project]);
 
+  const copyIp = () => {
+    if (serverIp) {
+      navigator.clipboard.writeText(serverIp);
+      toast.success("Server IP copied!");
+    }
+  };
+
   const handleUpdate = async () => {
     if (!dbUri) return toast.error("Database URI is required");
 
@@ -329,7 +349,20 @@ function DatabaseConfigForm({ project, projectId, token }) {
       // Typically we'd reload project data here, but for now we rely on user refresh or optimistic ui if needed
       // Ideally notify parent to refresh project, but basic flow:
     } catch (err) {
-      toast.error(err.response?.data?.error || "Failed to update DB config");
+      const errorMsg = err.response?.data?.error || "Failed to update DB config";
+
+      if (errorMsg.includes("whitelist Server IP")) {
+        toast.error(
+          <div>
+            <b>Access Denied!</b>
+            <br />
+            {errorMsg}
+          </div>,
+          { duration: 6000 }
+        );
+      } else {
+        toast.error(errorMsg);
+      }
     } finally {
       setLoading(false);
     }
@@ -439,26 +472,45 @@ function DatabaseConfigForm({ project, projectId, token }) {
           <div
             style={{
               display: "flex",
-              justifyContent: "flex-end",
-              gap: "12px",
+              justifyContent: "space-between",
+              alignItems: "center",
               marginTop: "1rem",
+              paddingTop: "1rem",
+              borderTop: "1px solid var(--color-border)",
             }}
           >
-            {isConfigured && (
+            <div style={{ display: 'flex', alignItems: 'center', gap: '8px', fontSize: '0.85rem', color: 'var(--color-text-muted)' }}>
+              <Server size={14} />
+              <span>Server Public IP: <code style={{ background: 'rgba(255,255,255,0.1)', padding: '2px 6px', borderRadius: '4px' }}>{serverIp || "Loading..."}</code></span>
+              {serverIp && (
+                <button
+                  onClick={copyIp}
+                  className="btn-icon"
+                  title="Copy IP"
+                  style={{ border: 'none', background: 'transparent', cursor: 'pointer', color: 'var(--color-primary)', padding: 0, marginLeft: '5px' }}
+                >
+                  <Copy size={14} />
+                </button>
+              )}
+            </div>
+
+            <div style={{ display: 'flex', gap: '12px' }}>
+              {isConfigured && (
+                <button
+                  className="btn btn-ghost"
+                  onClick={() => setShowForm(false)}
+                >
+                  Cancel
+                </button>
+              )}
               <button
-                className="btn btn-ghost"
-                onClick={() => setShowForm(false)}
+                onClick={handleUpdate}
+                className="btn btn-primary"
+                disabled={loading}
               >
-                Cancel
+                {loading ? "Saving..." : "Connect Database"}
               </button>
-            )}
-            <button
-              onClick={handleUpdate}
-              className="btn btn-primary"
-              disabled={loading}
-            >
-              {loading ? "Saving..." : "Connect Database"}
-            </button>
+            </div>
           </div>
         </div>
       )}