Steller-Flow/stellflow-backend

GET /api/invoices lets any user list other users' invoices via creatorId/recipientId 8 days ago

help wanted security

0

REST API for StellFlow — invoices, escrow records, USDC payment tracking and Stellar wallet linking. Express 5, Prisma 7, PostgreSQL.

TypeScript

#express#payments#prisma#soroban#stellar#typescript#usdc#web3

Upload routes are never mounted, and multipart/form-data is blocked by the global content-type check 8 days ago

good first issue help wanted backend

Steller-Flow/stellflow-backend

0

REST API for StellFlow — invoices, escrow records, USDC payment tracking and Stellar wallet linking. Express 5, Prisma 7, PostgreSQL.

TypeScript

#express#payments#prisma#soroban#stellar#typescript#usdc#web3

Commit the initial Prisma migration and validate required env at startup 8 days ago

help wanted backend

Steller-Flow/stellflow-backend

0

REST API for StellFlow — invoices, escrow records, USDC payment tracking and Stellar wallet linking. Express 5, Prisma 7, PostgreSQL.

TypeScript

#express#payments#prisma#soroban#stellar#typescript#usdc#web3

Consolidate src/schemas and src/validators; delete the dead duplicate invoice schema and unused exports 8 days ago

good first issue help wanted backend

Steller-Flow/stellflow-backend

0

REST API for StellFlow — invoices, escrow records, USDC payment tracking and Stellar wallet linking. Express 5, Prisma 7, PostgreSQL.

TypeScript

#express#payments#prisma#soroban#stellar#typescript#usdc#web3

OpenAPI: upload routes and /health undocumented, spec glob breaks in dist, missing Payment/Notification/AuditLog schemas 8 days ago

documentation good first issue help wanted

Steller-Flow/stellflow-backend

0

REST API for StellFlow — invoices, escrow records, USDC payment tracking and Stellar wallet linking. Express 5, Prisma 7, PostgreSQL.

TypeScript

#express#payments#prisma#soroban#stellar#typescript#usdc#web3

Test coverage: six of ten controllers untested, Prisma mock is missing auditLog 8 days ago

help wanted testing

Steller-Flow/stellflow-backend

0

REST API for StellFlow — invoices, escrow records, USDC payment tracking and Stellar wallet linking. Express 5, Prisma 7, PostgreSQL.

TypeScript

#express#payments#prisma#soroban#stellar#typescript#usdc#web3

Rate limiting gaps: per-user limiter never applies, login lockout is dead code, no trust proxy 8 days ago

help wanted security

Steller-Flow/stellflow-backend

0

REST API for StellFlow — invoices, escrow records, USDC payment tracking and Stellar wallet linking. Express 5, Prisma 7, PostgreSQL.

TypeScript

#express#payments#prisma#soroban#stellar#typescript#usdc#web3

Error responses have four different shapes; Prisma, JSON-parse and payload errors all surface as 500 8 days ago

help wanted backend

Steller-Flow/stellflow-backend

0

REST API for StellFlow — invoices, escrow records, USDC payment tracking and Stellar wallet linking. Express 5, Prisma 7, PostgreSQL.

TypeScript

#express#payments#prisma#soroban#stellar#typescript#usdc#web3

Escrow state changes are three separate writes with no transaction 8 days ago

help wanted backend

Steller-Flow/stellflow-backend

0

REST API for StellFlow — invoices, escrow records, USDC payment tracking and Stellar wallet linking. Express 5, Prisma 7, PostgreSQL.

TypeScript

#express#payments#prisma#soroban#stellar#typescript#usdc#web3

stellar.service.ts is a stub: nothing is verified on-chain and contract ids are fabricated 8 days ago

help wanted backend

Steller-Flow/stellflow-backend

0

REST API for StellFlow — invoices, escrow records, USDC payment tracking and Stellar wallet linking. Express 5, Prisma 7, PostgreSQL.

TypeScript

#express#payments#prisma#soroban#stellar#typescript#usdc#web3

POST /api/payments/webhook and /verify have no ownership or authenticity checks 8 days ago

help wanted security

Steller-Flow/stellflow-backend

0

REST API for StellFlow — invoices, escrow records, USDC payment tracking and Stellar wallet linking. Express 5, Prisma 7, PostgreSQL.

TypeScript

#express#payments#prisma#soroban#stellar#typescript#usdc#web3

Wallet linking is unverified: signature check is `length > 0`, and profile/register accept raw addresses 8 days ago

help wanted security

Steller-Flow/stellflow-backend

0

REST API for StellFlow — invoices, escrow records, USDC payment tracking and Stellar wallet linking. Express 5, Prisma 7, PostgreSQL.

TypeScript

#express#payments#prisma#soroban#stellar#typescript#usdc#web3

Open Issues Need Help