User registration flow in Express - Step-by-Step Execution

Concept Flow - User registration flow

User submits registration form

↓

Server receives POST /register

↓

Validate input data

↓

Check if user exists

↓

Hash password

↓

Save user to DB

↓

Send success response

↓

User registered successfully

This flow shows how a user registration request is handled step-by-step from form submission to saving user data or sending errors.

Execution Sample

Express

app.post('/register', async (req, res) => {
  const { username, password } = req.body;
  if (!username || !password) return res.status(400).send('Missing data');
  const exists = await User.findOne({ username });
  if (exists) return res.status(409).send('User exists');
  const hash = await hashPassword(password);
  await User.create({ username, password: hash });
  res.status(201).send('Registered');
});

This code handles user registration by checking input, verifying user existence, hashing password, saving user, and sending response.

Execution Table

Step	Action	Input/Condition	Result/Output
1	Receive POST /register	Request body: {username:'alice', password:'1234'}	Proceed to validation
2	Validate input	username and password present?	Yes, continue
3	Check if user exists	User.findOne({username:'alice'})	No user found
4	Hash password	hashPassword('1234')	Password hashed
5	Save user	User.create({username:'alice', password:hashed})	User saved in DB
6	Send response	Status 201	Response: 'Registered' sent
7	End	Process complete	User registration successful

💡 Process stops after sending success response or error if any validation fails

Variable Tracker

Variable	Start	After Step 2	After Step 3	After Step 4	After Step 5	Final
username	undefined	'alice'	'alice'	'alice'	'alice'	'alice'
password	undefined	'1234'	'1234'	'1234'	'1234'	'1234'
exists	undefined	undefined	null (no user)	null	null	null
hash	undefined	undefined	undefined	'hashedPassword'	'hashedPassword'	'hashedPassword'

Key Moments - 3 Insights

Why do we check if username and password exist before proceeding?

Because if either is missing, the server should stop and send an error (see execution_table step 2). This prevents saving incomplete data.

What happens if the username already exists in the database?

The server sends a 409 error response and stops registration (not shown in this example but would happen after step 3 if exists is true).

Why do we hash the password before saving?

To keep user passwords safe. Storing plain passwords is risky. Hashing transforms it into a secure form (see step 4).

Visual Quiz - 3 Questions

Look at the execution table, what is the value of 'exists' after step 3?

A null (no user found)

B 'alice'

C undefined

D 'hashedPassword'

💡 Hint

Check the 'exists' variable in variable_tracker after step 3

At which step does the server send the success response?

A Step 4

B Step 6

C Step 2

D Step 3

💡 Hint

Look at the 'Send response' action in execution_table

If the password was missing in the request, what would happen?

A The server hashes the password anyway

B The server sends a 400 error and stops

C The server saves the user with empty password

D The server ignores the request

💡 Hint

Refer to step 2 in execution_table where input validation happens

Concept Snapshot

User registration flow in Express:
- Receive POST /register with username and password
- Validate inputs; if missing, send 400 error
- Check if user exists; if yes, send 409 error
- Hash password securely
- Save user data to database
- Send 201 success response
Always validate and hash before saving!

Full Transcript

This visual execution trace shows how a user registration request is handled in Express. First, the server receives a POST request with username and password. It checks if both are present; if not, it sends a 400 error. Then it checks if the username already exists in the database. If it does, it sends a 409 error. If not, it hashes the password securely, saves the new user to the database, and finally sends a 201 success response. Variables like username, password, exists, and hash change step-by-step as the code runs. This flow ensures safe and correct user registration.