May 2026 — Present
BitQit Pvt Ltd
Associate Software Developer·Sparq — Shopify search & merchandising
- Filters Delivered the collection filters feature end to end across two services — a first-class Filter resource in the NestJS / TypeORM / PostgreSQL API (per-collection filter entities, colour-group palettes, layout settings, facet sync and a diagnostic facets endpoint, with the schema migrations and unique constraints behind them) and the Nuxt dashboard UI merchants configure it from, including a live storefront preview and theme config export.
- Security Found and fixed a cross-store IDOR vulnerability that let a request scoped to one merchant store reach another store's data on a shared multi-tenant platform.
SELECT id, store_id, handle FROM collectionsWHERE handle = $1AND store_id = $2 id | store_id | handle ------+----------+-------------- 1042 | 7731 | summer-sale 2287 | 9004 | summer-sale (2 rows) (1 row)store_id to the WHERE clause scopes every query to the calling store.
- Tokens Implemented support for Shopify's move to expiring offline access tokens across the merchant portal and the Shopify backend — schema columns and migration, token service and refresh handling — and replaced a migration cron with an operator-driven admin endpoint after code review.
- Analytics Built the merchant analytics dashboard — searches, zero-result queries, click-through and conversion — from the Nuxt UI through to the analytics APIs behind it, and extended the reporting window from 7 to 90 days.
-
Scopes
Investigated the blast radius of Shopify's deprecation of
ORDER_STATUSandALLScriptTag scopes across live merchant stores, wrote read-only Node/PostgreSQL tooling to identify every affected client, validated the plan against a local mock Shopify API, and handed the team a runnable migration path. - Migration Migrated the dashboard frontend from Nuxt 3 to Nuxt 4 against an undocumented upgrade path — reverse-engineered the breaking changes from build failures and shipped it with no regressions.