CART_API_SYSTEM

THE_PROBLEM

E-commerce platform needed a robust shopping cart API to serve multiple frontend websites (iptvxtream.fr, iptvsmarterspro.me) from a single backend. Requirements included secure cart sessions, rate limiting to prevent abuse, order processing with email notifications, and multi-website tenant isolation.

THE_APPROACH

• —Built FastAPI backend with async request handling for high concurrency
• —Implemented secure cart sessions using cart_id + cart_secret authentication pattern
• —Added SlowAPI rate limiting (5-20 req/min per endpoint) to prevent abuse and DDoS
• —Created multi-tenant architecture with origin-based website identification
• —Set up PostgreSQL with proper indexing for cart operations and order history
• —Integrated background task processing for order confirmation emails via SMTP
• —Configured CORS middleware with origin whitelisting for security

TECH_STACK

PERFORMANCE_DELTA