
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
codeintelli-com
Advanced tools
A modular, scalable backend system built for lead generation, loan applications, bank offer comparison, and OTP-based authentication.
A modular, scalable backend system built for lead generation, loan applications, bank offer comparison, and OTP-based authentication.
This backend powers the Unbias Loan Platform, enabling users to submit loan requirements, evaluate eligibility, generate multi-bank offers, compare offers, and submit final loan applications. It includes admin tools for lead management, offer regeneration, and agent assignment.
Unbias is an end-to-end backend system designed for:
The application is designed for scalability, modularity, and fast iteration.
Secure OTP-based verification using hashed OTPs, expiries, attempt limits, and rate protection.
Multi-step lead registration with:
Auto-creation from leads, upload user documents, update application status.
Generates offers from bank products with configurable logic:
Tabular comparison of multiple offers, normalized scoring.
| Layer | Technology |
|---|---|
| Language | Node.js (ES Modules) |
| Framework | Express.js |
| Database | MongoDB + Mongoose |
| Auth | OTP (Crypto), JWT (User Auth) |
| Storage | AWS S3 / Local Storage (configurable) |
| Logging | Winston / Morgan |
| Validation | Joi |
| API Docs | Swagger-ready (Loader included) |
Src/
├── Controller/ # All controllers
├── Models/ # Mongoose models
├── Services/ # Business logic (OTP, OfferEngine, EMI)
├── Middleware/ # Auth, validation, uploads, errors
├── Routes/ # API routes grouped by module
├── Validations/ # Joi validation schemas
├── Utils/ # Helpers, Custom handlers, Logger, LTV/EMI helpers
├── Loaders/ # Server, DB, Morgan, Swagger initialization
├── Templates/ # Email templates (OTP, Offer summary)
├── Uploads/ # Uploaded files if local storage
Config/ # Environment and global configurations
main.js # App bootstrap
package.json
config.env
Create a config.env file in root:
PORT=5000
NODE_ENV=development
# Database
MONGO_URI=mongodb://localhost:27017/unbias
# JWT (User login system)
JWT_SECRET=your-secret
JWT_EXPIRE=2d
# OTP
OTP_EXPIRE_MINUTES=5
OTP_MAX_ATTEMPTS=5
# AWS S3 (if enabled)
AWS_ACCESS_KEY_ID=
AWS_SECRET_ACCESS_KEY=
AWS_REGION=
AWS_BUCKET_NAME=
# CLOUDINARY (if enabled)
CLOUDINARY_NAME=
CLOUDINARY_API_KEY=
CLOUDINARY_API_SECRET=
# SMTP / Email
SMTP_HOST=
SMTP_PORT=
SMTP_USER=
SMTP_PASS=
POST /auth/login
POST /auth/register (optional)
POST /otp/send
POST /otp/verify
POST /lead/create
PATCH /lead/:id/update-step
GET /lead/:id
PATCH /lead/:id/add-income
PATCH /lead/:id/add-emi
PATCH /lead/:id/add-co-applicant
PATCH /lead/:id/update-property
PATCH /lead/:id/update-loan-requirement
PATCH /lead/:id/update-employment
PATCH /lead/:id/update-eligibility
POST /lead/:id/submit
POST /application/create
GET /application/:id
PATCH /application/:id/update
POST /application/:id/upload-document
POST /application/generate-offers
PATCH /application/:id/select-offer
GET /offers/list
POST /offers/compare
POST /offers/regenerate (admin)
GET /bank/list
GET /admin/leads
PATCH /admin/lead/:id/status
PATCH /admin/lead/:id/assign
Every route uses Joi validation via the custom middleware:
ValidateRequest(schema, "body" | "query" | "params");
Validation files:
LeadValidation.jsLoanApplicationValidation.jsOtpValidation.jsOfferValidation.jsAdminValidation.jsgit clone https://github.com/<your-org>/unbias-backend.git
cd unbias-backend
yarn install
# or
npm install
Copy .env.example (if present) or create config.env.
yarn dev
yarn build
yarn start
Recommended deployment stack:
import/export)created_at, updated_at, deleted_at, is_activeSuccessHandlerCustomErrorHandler# Start dev server
yarn dev
# Build
yarn build
# Format code
yarn format
FAQs
A modular, scalable backend system built for lead generation, loan applications, bank offer comparison, and OTP-based authentication.
We found that codeintelli-com demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.