Skip to Content
Getting StartedPlatform Overview

Platform Overview

Siyahfy is a multi-vendor e-commerce SaaS platform built for Indian businesses. It provides vendors with a complete toolkit to create, manage, and scale their online stores --- from product catalogs and order management to custom storefronts and marketing automation.

What is Siyahfy?

Siyahfy enables multiple vendors to operate independent online stores under one platform. Each vendor gets their own dashboard, storefront, payment processing, and analytics. The platform handles everything from user authentication and subscription billing to theme customization and affiliate programs.

Key capabilities include:

  • Multi-vendor stores — each vendor operates an independent e-commerce store
  • Custom storefronts — vendors choose from themes or build custom storefronts
  • Theme editor — visual drag-and-drop editor for storefront customization
  • Developer studio — third-party developers build and publish store apps
  • Affiliate system — vendors and affiliates earn through referral programs
  • Marketing tools — WhatsApp marketing, email campaigns, SEO tools
  • Order management — orders, returns, refunds, cancellations, COD control
  • Subscription plans — tiered plans (Basic, Pro, Growth) with feature gating
  • Custom domains — vendors connect their own domains with automatic SSL

Ecosystem

The platform is composed of 6 frontend applications, a storefront proxy server, a shared backend API, and a documentation site, all backed by PostgreSQL and Redis.

All Apps

AppURLPortPurpose
Vendor Dashboardapp.siyahfy.com3000Store management, products, orders, analytics
Theme Editoreditor.siyahfy.com3002Visual drag-and-drop theme customization
Developer Studiostudio.siyahfy.com3012IDE for theme developers
Developer Portaldeveloper.siyahfy.com3000App developer dashboard
App Storestore.siyahfy.com3000App marketplace for store owners
Marketing Sitesiyahfy.com3000Landing pages, pricing
Storefront Proxybackend-store.siyahfy.com5014Routes customer requests to theme servers
Store Themesiyahfy-theme-25023001Default customer-facing storefront
Backend APIbackend.siyahfy.com3003Central REST API server

User Roles

RoleDescriptionAccess
AdminPlatform administratorFull access to all stores, vendors, plans, and platform settings via app.siyahfy.com
VendorStore ownerManages their own store(s): products, orders, themes, settings, marketing
StaffVendor team memberLimited vendor dashboard access based on assigned role permissions
DeveloperThird-party developerBuilds and publishes store apps via developer.siyahfy.com and studio.siyahfy.com
CustomerEnd shopperBrowses stores, places orders, manages account on vendor storefronts
AffiliateReferral partnerEarns commissions through referral links via affiliate.siyahfy.com

Tech Stack

Frontend

TechnologyVersionPurpose
Next.js14.xReact framework for all frontend apps
React18.xUI library
TypeScript4.9Type safety
Tailwind CSS3.xUtility-first CSS framework
Ant Design5.xUI component library (vendor dashboard)
Shopify Polaris13.xUI components (dashboard layouts)
Redux Toolkit1.9Global state management
Zustand5.xLightweight state management
Tiptap2.xRich text editor
Monaco Editor4.6Code editor (theme editing)
Framer Motion11.xAnimations
Chart.js / amCharts—Analytics charts and geo maps
SweetAlert211.xAlert dialogs
dnd-kit6.xDrag and drop

Backend

TechnologyVersionPurpose
Node.js20.xRuntime
Express.js4.xHTTP framework
PostgreSQL (pg)8.xPrimary database driver
Redis5.xCaching layer
JSON Web Tokens9.xAuthentication
Multer1.4File uploads
Nodemailer6.xEmail sending (Gmail SMTP)
Sharp0.34Image processing
PDFKit / pdf-lib—PDF generation (invoices, labels)
Razorpay SDK2.9Payment gateway
Cashfree SDK4.xPayment gateway
AWS S3 SDK3.xBackblaze B2 / Cloudflare R2 storage
Firebase Admin13.xPush notifications and auth
node-cron3.xScheduled jobs
Swagger5.xAPI documentation
fluent-ffmpeg2.xVideo processing
bcrypt5.xPassword hashing
speakeasy2.xTwo-factor authentication (TOTP)

Infrastructure

ComponentTechnology
DatabasePostgreSQL 14+
CacheRedis 7+
File StorageBackblaze B2, Cloudflare R2
PaymentsRazorpay, Cashfree
EmailGmail SMTP via Nodemailer
AuthJWT + bcrypt + Firebase + Google OAuth
ShippingDelhivery API
MarketingWhatsApp Business API
AnalyticsGoogle Analytics Data API
DeploymentDocker + Traefik (reverse proxy with auto-SSL)

Authentication Flow

The platform uses JWT-based authentication with tokens stored in HTTP cookies. Different cookie names distinguish between admin/vendor sessions and customer sessions.

The platform uses several cookies to manage authentication and store context:

Cookie NamePurposeSet By
tokenSagartechAdmin JWT token — authenticates platform administratorsBackend on admin login
tokenVendorsSagartechVendor JWT token — authenticates store vendorsBackend on vendor login
storeSelectedSiyahfyCurrently selected store slug for multi-store vendorsFrontend on store selection
vendorStoreIdNumeric store ID for the active vendor storeFrontend on store selection
vendorhaveStoreBoolean flag indicating whether the vendor has created a storeFrontend after store creation check

Middleware Chain

The authenticate middleware (lib/index.js) extracts JWT tokens in this priority order:

  1. Authorization header (Bearer token)
  2. tokenSagartech cookie
  3. tokenVendorsSagartech cookie
  4. token cookie (fallback)

After extraction, the token is verified using jwt.verify() with SECRET_KEY, and the decoded userId and role_id are attached to req for downstream route handlers.

Rate Limiting

Authentication endpoints are protected by rate limiting to prevent brute-force attacks:

EndpointWindowMax Requests
/api/adminlogin15 minutes5
/api/vendorLogin15 minutes5
/api/storefront/*1 minute2,000
/api/* (general)1 minute500
Local Setup