Experience · Backend · Active

cs-portal backend

NestJS BFF for CS Portal, owning HR, administration, document and productivity workflows while delegating shared auth and Salesforce access to Core services.

• NestJS
• TypeScript
• Google APIs
• Microsoft Graph
• pdf-lib
• pdf-parse

Spec sheet

Repository path

cs-portal/backend

Runtime

NestJS BFF

Default port

3003

Public surface

Same-origin /api on portal host

Salesforce access

Through platform-connectors-service

CSRF

Global Origin/Referer guard on mutating /api requests

Responsibilities

• Expose product APIs for HR, payroll, consumptives, documents, entities, processes and administration.
• Bridge platform-auth-service for shared session and local password login.
• Use PlatformConnectorsClient and request context propagation for Salesforce-backed flows.
• Provide structured Salesforce lookup endpoints and DTOs for frontend consumers.

Interfaces and contract surface

• GET /api/health
• Same-origin /api/auth/*
• Same-origin /api/salesforce/lookups/*
• Same-origin /api/mail/*
• Same-origin HR and administration APIs

Consumers

• cs-portal frontend

Dependencies and external touchpoints

• platform-auth-service
• platform-connectors-service

Notes

• Raw Salesforce query remains administrative tooling and is disabled by default.
• Recent commits extracted large backend services into runtime services to keep public service files thin.

Source references

• cs-portal/backend/package.json
• cs-portal/backend/src/platform/platform-connectors.client.ts
• cs-portal/backend/src/salesforce/salesforce-lookup.service.ts
• cs-portal/docs/backend-api-map.md