TradeFlow-API: Off-Chain Infrastructure

TradeFlow-API is the backend service layer for the TradeFlow protocol. It bridges the on-chain Soroban contracts with off-chain Real-World Asset (RWA) data.

🏗 Architecture

The service performs three critical functions:

1. Event Indexing: Listens to TradeFlow-Core contract events (Minting, Repayment) and indexes them into PostgreSQL.
2. Risk Engine: Processes PDF invoices and assigns risk scores (0-100) signed by our oracle key.
3. Auth: Manages user sessions via wallet signatures (SIWE - Sign In With Ethereum/Stellar style).

🐳 Infrastructure

We use Docker for a consistent development environment.

services:
  api:
    build: .
    ports: ["3000:3000"]
  db:
    image: postgres:15
    environment:
      POSTGRES_DB: tradeflow

🔒 Security & CORS

The API is configured with strict Cross-Origin Resource Sharing (CORS) policies to ensure secure communication:

• Allowed Origins:
  • http://localhost:3000 (Local Development)
  • https://tradeflow-web.vercel.app (Production)
• Allowed Methods: GET, POST, PUT, PATCH

Verifying CORS

To verify the CORS configuration, ensure dependencies are installed and the server is running, then execute the test script:

# 1. Install dependencies
npm install

# 2. Start the server
npm run start

# 3. Run the CORS verification script (in a new terminal)
node test-cors.js