Khayiron
Volunteer‑Matching Platform
Khayiron connects volunteers with organizations across the Middle East and North Africa, simplifying engagement with secure dual authentication, an admin dashboard, and bilingual certificates.
khayiron.com
Overview / About
Khayiron is a full-stack volunteer management platform that connects volunteers with organizations seeking community support. The system provides a dual-portal experience — volunteers discover and apply for opportunities, while organizations manage postings, track volunteer engagement, issue verified certificates, and communicate through real-time notifications. A dedicated admin dashboard provides complete oversight of platform activity, user management, and content moderation.
Problem
Volunteer coordination is fragmented and inefficient. Organizations rely on spreadsheets, email chains, and manual record-keeping to manage volunteers — leading to missed applications, untracked hours, and no standardized proof of service. Volunteers, on the other hand, struggle to discover relevant opportunities and lack a centralized place to manage their contributions and credentials.
Solution
Build a unified platform where organizations can post opportunities, screen applicants, manage volunteer lifecycles, and issue verifiable certificates — all from a single dashboard. Volunteers get a personalized experience with opportunity discovery, application tracking, and a portfolio of earned credentials. An admin layer ensures platform integrity through moderation, analytics, and audit logging.
Key Features
| Feature | Description |
|---|---|
| Dual-Role Authentication | Separate registration and login flows for volunteers and organizations, with email verification and OTP-based password reset |
| Opportunity Management | Organizations create, edit, and manage volunteer postings with categories, date ranges, skill requirements, and volunteer capacity |
| Volunteer Application Pipeline | Full lifecycle management: application submission, review, acceptance/rejection, and status tracking |
| Certificate Issuance | Organizations issue PDF certificates with unique certificate numbers, verified hours, and revocation support |
| Review and Rating System | Peer-review system with star ratings, cached statistics, and per-user review breakdown |
| Real-Time Notifications | In-app notification system for both volunteers and organizations with read/unread tracking |
| Search and Discovery | Full-text search across opportunities with category, location, and status filtering |
| Admin Dashboard | Comprehensive admin panel with user management, opportunity moderation, certificate oversight, audit logs, and platform metrics |
| Internationalization | Full Arabic/English support across the web frontend with RTL layout handling |
| Homepage Content Management | Admin-editable marketing content for the public landing page |
Tech Stack
| Layer | Technologies |
|---|---|
| Frontend | React, TypeScript, Vite, React Router, i18next |
| Backend | Node.js, Express.js, MongoDB, Mongoose, Redis |
| Authentication | JWT (access + refresh tokens), bcrypt, HMAC-hashed OTP, email verification |
| File Handling | Multer for uploads, PDFKit for certificate PDF generation |
| Admin Panel | React, TypeScript, dedicated admin authentication |
| Infrastructure | Rate limiting, request validation, structured logging, caching middleware, audit trail |
How It Works
- Registration -- Volunteers and organizations register through separate flows with email verification, document upload (for organizations), and admin approval gates
- Opportunity Posting -- Approved organizations create volunteer opportunities specifying tasks, required skills, dates, location, and volunteer capacity
- Volunteer Discovery -- Volunteers browse and search opportunities using full-text search with category and location filters, then submit applications
- Application Management -- Organizations review incoming applications, accept or reject volunteers, and manage their active volunteer roster
- Service Tracking -- Once a volunteer completes their commitment, organizations log hours and issue verifiable PDF certificates with unique certificate numbers
- Platform Oversight -- Admins monitor all activity through audit logs, manage user accounts, moderate content, and track platform-wide metrics
Results / Outcomes
- Fully functional dual-portal platform supporting both volunteer and organization workflows end-to-end
- Automated certificate generation with unique identifiers and PDF export, replacing manual documentation
- Role-based access control with admin moderation layer ensuring platform quality and trust
- Production-ready security: JWT rotation, rate limiting, input validation, bcrypt hashing, and HMAC-secured password resets
- Bilingual support (Arabic/English) with full RTL layout compatibility
My Role
- Architected the full-stack system: database schema design, REST API structure, authentication flow, and frontend component hierarchy
- Built the Express.js backend with 15 controllers, 6 middleware layers, and 11 data models covering the complete business logic
- Implemented dual JWT authentication with token rotation, email verification, and OTP-based password recovery
- Developed the React/TypeScript frontend with role-based routing, i18n support, and a responsive landing page
- Created the admin dashboard with 11 management pages: user oversight, opportunity moderation, certificate management, audit logs, and platform metrics
- Designed the PDF certificate generation pipeline with unique numbering, organization branding, and revocation support
- Integrated Redis caching, structured logging, and rate limiting for production readiness