QueueFlow is a production-oriented real-time Kanban project management backend built with Node.js, Express.js, Prisma ORM, PostgreSQL (Supabase), and Socket.io.
It powers a collaborative workspace where teams can create projects, manage tasks, collaborate through sticky notes, track activities in real time, and securely manage members using Role-Based Access Control (RBAC).
Designed with scalability in mind, QueueFlow focuses on clean architecture, optimized database queries, real-time synchronization, and production-ready backend engineering practices.
- 🔐 JWT Authentication
- 👥 Role-Based Access Control (RBAC)
- 📁 Project Management
- ✅ Kanban Task Management
- 📝 Sticky Notes
- ⚡ Real-Time Updates using Socket.io
- 📈 Activity Timeline
- 📊 Dashboard Analytics
- 📨 Time-Limited Project Invitations
- 🔍 Optimized Database Queries
- 📄 Server-side Pagination
- 🛡 Custom Sliding Window Rate Limiter
| Category | Technology |
|---|---|
| Runtime | Node.js |
| Framework | Express.js |
| Language | JavaScript |
| Database | PostgreSQL (Supabase) |
| ORM | Prisma ORM |
| Authentication | JWT |
| Password Security | Bcrypt |
| Real-Time Communication | Socket.io |
| Authorization | RBAC |
| API Style | REST |
| Deployment | Render |
QueueFlow uses Prisma ORM with PostgreSQL to maintain a scalable relational database architecture.
Relationships include:
- User → Projects
- Project → Tasks
- Task → Sticky Notes
- Project → Activity Timeline
- User ↔ Project (Many-to-Many via ProjectMember)
Socket.io enables instant synchronization across connected clients.
Users joining the same project automatically receive updates when:
- Tasks are created
- Tasks are updated
- Tasks move across Kanban columns
- Sticky notes are added
- Sticky notes are edited
- Sticky notes are deleted
- Activities are generated
QueueFlow implements stateless JWT authentication.
Every protected endpoint validates:
- JWT token
- User identity
- Project membership
- User role
Only Project Managers can access privileged endpoints like:
- Create Project
- Generate Invite
- Manage Members
Every important action generates an immutable Activity Event.
Examples:
- Project Created
- Task Assigned
- Task Completed
- Sticky Note Added
- Task Deleted
This creates a complete audit history for every workspace.
- JWT Authentication
- Password Hashing using Bcrypt
- Role-Based Access Control
- Protected Routes
- Secure Invite Codes
- Expiring Project Invitations
- Custom Sliding Window Rate Limiter
- Environment Variable Isolation
- CORS Protection
QueueFlow has recently undergone major backend optimizations focused on reducing database load and improving response times.
- Lazy loading for Sticky Notes
- Reduced API payload sizes
- Prisma
selectqueries instead of heavyinclude - Optimized REST responses
- Removed unnecessary nested joins
Implemented server-side pagination for:
- Project Tasks
- User Queue
- Activity Timeline
- Sticky Notes
Benefits:
- Faster page rendering
- Reduced bandwidth usage
- Lower database load
- Improved scalability
- Removed redundant indexes
- Added targeted composite indexes
- Optimized WHERE + ORDER BY queries
- Reduced full table scans
- Improved Prisma query execution
- Optimistic frontend updates
- Socket synchronization
- Incremental activity loading
- Lazy note fetching
Recent updates include:
- Server-side pagination across all major resources
- Lazy loading for Sticky Notes
- Composite PostgreSQL indexes
- Optimized Prisma queries
- Smaller API payloads
- Activity Timeline pagination
- Incremental frontend loading
- Custom Sliding Window Log Rate Limiter
- Improved Redux synchronization
- Better database scalability
Stores authentication and profile information.
Relationships
- One User → Many Projects
- One User → Many Tasks
- One User → Many Sticky Notes
- One User → Many Project Memberships
Represents an isolated workspace.
Contains:
- Members
- Tasks
- Activities
- Invitations
Stores task information including:
- Status
- Priority
- Position
- Assigned User
- Project
- Completion timestamps
Stores collaborative notes attached to tasks.
Tracks every important action occurring inside a project.
Stores temporary invitation codes with automatic expiration.
Junction table connecting Users and Projects with assigned roles.
QueueFlow_Backend
│
├── prisma
│ ├── schema.prisma
│ └── migrations
│
├── src
│ ├── config
│ ├── controllers
│ ├── middleware
│ ├── routes
│ ├── services
│ ├── sockets
│ ├── utils
│ ├── app.js
│ └── server.js
│
├── screenshots
│
├── .env
├── package.json
└── README.md
git clone https://github.com/Anoop-Kumar-31/QueueFlow_Backend.git
cd QueueFlow_Backendnpm installCreate a .env file in the project root.
DATABASE_URL="postgresql://username:password@host:6543/postgres?pgbouncer=true"
DIRECT_URL="postgresql://username:password@host:5432/postgres"
PORT=5000
JWT_SECRET=your_secret_key
CLIENT_URL=http://localhost:5173npx prisma db pushnpx prisma generatenpm run devServer starts at
http://localhost:5000
| Method | Endpoint |
|---|---|
| POST | /api/auth/register |
| POST | /api/auth/login |
| GET | /api/auth/profile |
| Method | Endpoint |
|---|---|
| GET | /api/projects |
| POST | /api/projects |
| GET | /api/projects/:projectId |
| PATCH | /api/projects/:projectId |
| DELETE | /api/projects/:projectId |
| Method | Endpoint |
|---|---|
| GET | /api/tasks |
| POST | /api/tasks |
| PATCH | /api/tasks/:taskId |
| DELETE | /api/tasks/:taskId |
| GET | /api/tasks/:taskId/notes |
| Method | Endpoint |
|---|---|
| POST | /api/tasks/:taskId/notes |
| PATCH | /api/notes/:noteId |
| DELETE | /api/notes/:noteId |
| Method | Endpoint |
|---|---|
| GET | /api/projects/:projectId/activity |
| Method | Endpoint |
|---|---|
| POST | /api/projects/:projectId/invite |
| POST | /api/projects/join |
QueueFlow uses Socket.io for real-time collaboration.
| Event |
|---|
| joinProject |
| leaveProject |
| typing |
| Event | Description |
|---|---|
| taskCreated | New task created |
| taskUpdated | Task updated |
| taskDeleted | Task removed |
| stickyNoteAdded | New sticky note |
| stickyNoteUpdated | Sticky note updated |
| stickyNoteDeleted | Sticky note deleted |
| activityCreated | New timeline activity |
Recent backend improvements include
✅ Lazy Loading
✅ Pagination
✅ Composite Database Indexes
✅ Optimized Prisma Queries
✅ Reduced Payload Size
✅ Optimistic Updates
✅ Socket Synchronization
✅ Custom Rate Limiter
These improvements significantly reduced unnecessary database operations while improving scalability for larger projects.
screenshots/
└── ER_NEW.png
- Login
- Dashboard
- Kanban Board
- Task Details
- Activity Timeline
- Authentication
- Authorization
- RBAC
- Project Management
- Kanban Board
- Sticky Notes
- Activity Timeline
- Dashboard Analytics
- Socket.io Integration
- Pagination
- Database Optimization
- Rate Limiting
- Email Notifications
- Calendar Integration
- Task Attachments
- File Uploads
- Search & Filtering
- AI Task Assistant
- Project Templates
- Email Verification
- Password Reset
- Unit & Integration Testing
The project follows modern backend development principles including:
- Layered Architecture
- RESTful API Design
- Repository Pattern (Prisma)
- Middleware-based Authentication
- Centralized Error Handling
- Modular Routing
- Scalable Folder Structure
- Real-time Event Broadcasting
- Secure Environment Configuration
Contributions are always welcome.
-
Fork the repository
-
Create a feature branch
git checkout -b feature/new-feature- Commit your changes
git commit -m "feat: add awesome feature"- Push the branch
git push origin feature/new-feature- Open a Pull Request
This project is licensed under the MIT License.
Full Stack Developer
- React.js
- Node.js
- Express.js
- PostgreSQL
- Prisma ORM
- Socket.io
- REST APIs
- Database Design
- Authentication & RBAC
- Real-Time Systems
GitHub
https://github.com/Anoop-Kumar-31
https://linkedin.com/in/anoop--kumar
Portfolio
https://myportfolio-kto7.onrender.com
⭐ If you found this project useful, consider giving it a star on GitHub. It helps support the project and motivates future improvements.