Backend API

backend.siyahfy.com/
├── index.js                 # Express app setup, middleware, route mounting
├── config/
│   ├── index.js             # PostgreSQL pool + auto-migration runner
│   ├── redis.js             # Redis client setup
│   ├── b2-config.js         # Backblaze B2 configuration
│   └── r2-config.js         # Cloudflare R2 configuration
├── middleware/
│   ├── index.js             # authorizeVendor (JWT + API key auth)
│   └── user.js              # authorizeCustomer (storefront user auth)
├── routes/                  # Express route handlers (80+ files)
│   ├── admin.js             # Admin authentication & management
│   ├── vendors.js           # Vendor CRUD
│   ├── products.js          # Product management
│   ├── orders.js            # Order processing
│   ├── customer.js          # Customer management
│   ├── collections.js       # Collection management
│   ├── discount.js          # Discount engine
│   ├── theme.js             # Theme management
│   ├── theme-editor.js      # Theme editor API
│   ├── theme-marketplace.js # Theme marketplace
│   ├── developer.js         # Developer/Studio APIs
│   ├── studio-auth.js       # Studio authentication
│   ├── plans/               # Subscription plan logic
│   ├── razorpay/            # Payment webhooks
│   ├── apis/                # Storefront client APIs (V1)
│   ├── template-v2-routes/  # Storefront APIs (V2)
│   ├── app_template_routes/ # Mobile app APIs
│   ├── marketing/           # Marketing automation
│   └── connect_store/       # External platform connectors
├── controller/
│   └── webhook-razorpay.js  # Razorpay webhook handler
├── database/                # Database schemas & reference SQL
│   ├── cms.sql              # Core CMS schema
│   ├── affiliate_system.sql # Affiliate tables
│   └── 2fa_migration.sql    # Two-factor auth tables
├── migrations/              # Auto-run SQL migrations
│   ├── add-custom-fonts.sql
│   ├── create-theme-tables.sql
│   ├── developer-apps.sql
│   ├── developer-earnings.sql
│   ├── inventory-system-v2.sql
│   └── ... (20+ migration files)
├── lib/                     # Shared utilities
│   ├── firebaseAdmin.js     # Firebase push notifications
│   ├── generate-token-pair.js # JWT token generation
│   ├── inventoryService.js  # Inventory management logic
│   ├── sendNotification.js  # Notification dispatcher
│   ├── whatsappMessages.js  # WhatsApp message templates
│   ├── amazon-utils.js      # Amazon marketplace helpers
│   └── stockAlert.js        # Low stock alerts
├── scripts/                 # Maintenance & utility scripts
├── html/                    # Email HTML templates
├── export/                  # Generated export files
├── upload/                  # Temporary upload directory
├── store_data/              # Store data snapshots
├── theme_json/              # Theme configuration JSONs
└── docs/                    # Internal documentation

Request
  │
  ├─ express.json({ limit: '20mb' })     ── Body parsing (20MB limit)
  │
  ├─ cors()                               ── CORS with *.siyahfy.com allowlist
  │
  ├─ Rate Limiters
  │   ├─ authLimiter (login routes)       ── 5 requests / 15 minutes
  │   ├─ storefrontLimiter (/storefront)  ── 2000 requests / minute
  │   └─ generalLimiter (/api/*)          ── 500 requests / minute
  │
  ├─ Route-level middleware
  │   ├─ authorizeVendor                  ── JWT/API-key auth for vendor routes
  │   └─ authorizeCustomer               ── JWT auth for storefront user routes
  │
  └─ Route Handler

const pool = new Pool({
    user: process.env.DB_USER,
    host: process.env.DB_HOST,
    database: process.env.DB_DATABASE,
    password: process.env.DB_PASSWORD,
    port: process.env.DB_PORT,
});

-- migrations/_migrations tracking table
CREATE TABLE IF NOT EXISTS _migrations (
    id SERIAL PRIMARY KEY,
    filename VARCHAR(255) UNIQUE NOT NULL,
    executed_at TIMESTAMP DEFAULT NOW()
);

// config/redis.js
const client = redis.createClient({
    url: isProd ? 'redis://redis:6379' : 'redis://127.0.0.1:6379',
});