Luxe | Multi-Vendor Ecommerce Marketplace API

A production-grade REST API for a multi-vendor ecommerce platform with seller onboarding, media management, and Stripe payments.

Luxe is a full-featured ecommerce backend that powers a multi-vendor marketplace where sellers can open stores, manage products, and fulfill orders while buyers browse, review, and purchase. The API is built with NestJS 11 and TypeORM on top of PostgreSQL, with Cloudinary handling media, Stripe Connect handling seller onboarding and registration fees, and Nodemailer driving transactional email. Authentication supports both email/password and Google OAuth, with JWTs in HttpOnly cookies, role-based authorization, two-tier rate limiting, and a fully documented OpenAPI 3 surface.

Tech Stack

NestJS 11TypeScript 5.7Node.js 20TypeORM 0.3PostgreSQL 16SupabasePassport.jsJWTGoogle OAuth 2.0bcryptStripe ConnectCloudinaryNodemailerMulterclass-validatorclass-transformerHelmetHPP@nestjs/throttler@nestjs/swagger

Features

Multi-vendor seller onboarding with Stripe Connect registration fees
Email/password and Google OAuth 2.0 authentication
JWT authentication with HttpOnly cookies and token versioning
Role-based authorization for USER, SELLER, and ADMIN
Product catalog with image and video media management
Many-to-many tag system for product categorization
Per-user cart with quantity updates and clearing
Order creation and per-item fulfillment status for sellers
Verified-buyer reviews with star ratings and media uploads
Favorites with per-product counts and bulk ID listing
Multiple contact information entries per user for shipping
Cloudinary integration for uploads, replacements, and deletion
Branded transactional email templates for password resets
Two-tier rate limiting with per-route opt-out
Helmet, HPP, and CORS allow-list security hardening
Full OpenAPI 3 documentation via Swagger UI at /docs

Challenges

Designing a multi-vendor data model where orders span multiple sellers with per-item fulfillment.
Implementing seller registration flows with Stripe Connect and a one-time onboarding fee.
Coordinating media uploads, replacements, and deletions across Cloudinary and TypeORM.
Enforcing verified-buyer review eligibility while keeping the read path efficient.
Building two-tier rate limiting that protects auth flows without throttling legitimate traffic.

Learnings

Deep NestJS architecture with custom guards, interceptors, and decorators.
TypeORM relationship modeling including one-to-one, one-to-many, and many-to-many.
Stripe Connect Express onboarding and payment intent lifecycles.
Serverless-ready NestJS deployment via a Vercel-compatible wrapper.
Production security patterns: Helmet, HPP, validation pipes, and rate limiting.

Feedback

For feedback or suggestions, contact me at: shahzaibalijamro@gmail.com

Links

Live Github

Luxe | Multi-Vendor Ecommerce Marketplace API

A production-grade REST API for a multi-vendor ecommerce platform with seller onboarding, media management, and Stripe payments.

Features

Multi-vendor seller onboarding with Stripe Connect registration fees

Email/password and Google OAuth 2.0 authentication

JWT authentication with HttpOnly cookies and token versioning

Role-based authorization for USER, SELLER, and ADMIN

Product catalog with image and video media management

Many-to-many tag system for product categorization

Per-user cart with quantity updates and clearing

Order creation and per-item fulfillment status for sellers

Verified-buyer reviews with star ratings and media uploads

Favorites with per-product counts and bulk ID listing

Multiple contact information entries per user for shipping

Cloudinary integration for uploads, replacements, and deletion

Branded transactional email templates for password resets

Two-tier rate limiting with per-route opt-out

Helmet, HPP, and CORS allow-list security hardening

Full OpenAPI 3 documentation via Swagger UI at /docs

Challenges

Designing a multi-vendor data model where orders span multiple sellers with per-item fulfillment.

Implementing seller registration flows with Stripe Connect and a one-time onboarding fee.

Coordinating media uploads, replacements, and deletions across Cloudinary and TypeORM.

Enforcing verified-buyer review eligibility while keeping the read path efficient.

Building two-tier rate limiting that protects auth flows without throttling legitimate traffic.

Learnings

Deep NestJS architecture with custom guards, interceptors, and decorators.

TypeORM relationship modeling including one-to-one, one-to-many, and many-to-many.

Stripe Connect Express onboarding and payment intent lifecycles.

Serverless-ready NestJS deployment via a Vercel-compatible wrapper.

Production security patterns: Helmet, HPP, validation pipes, and rate limiting.