Learn Computer Coding & Programming for Free | PROJET CARTHAGE

CARTHAGE MAX ARCHITECT STUDIO • ENTERPRISE LABS

Enterprise Lead Architect Guidance

Welcome to the Enterprise Architecture Studio. You are designing the infrastructure for "B2B Multi-Tenant SaaS Engine & Stripe Subscriptions". Inspect the live system topology below, review the Architectural Decision Records (ADR), implement each critical layer, and certify your build with production-grade audit benchmarks.

Resume Active Step

1. Select Your Architecture

4 Production Systems

B2B Multi-Tenant SaaS Engine & Stripe Subscriptions

Build a production-ready SaaS skeleton with tenant data isolation, secure Stripe webhooks, and RBAC.

This guided capstone walks you through building an enterprise-grade multi-tenant SaaS backend. Learn database-level tenant isolation, JWT authentication with secure httpOnly refresh tokens, granular RBAC (Owner, Admin, Member), and a full Stripe subscription lifecycle with idempotent webhook handling.

Next.js 14 / Node.jsTypeScriptPrisma / SQLiteStripe APIJWT & Argon2Zod Validation

Multi-tenant database architecture with strict company data isolation

Stripe webhooks security with cryptographic signature verification and idempotency

Role-Based Access Control (RBAC) middleware system

Docker containerization and production deployment on Linux cloud servers

LIVE SYSTEM TOPOLOGY & SLA BLUEPRINT

Enterprise Infrastructure Architecture

Real-time service orchestration. Click any node to inspect SLA budget, security posture, and cloud cost.

Cluster Health:0/4 Operational

SLA Target:99.99%

PENDING

NŒUD 01•1.2 ms

Edge Reverse Proxy & SSL

Let's Encrypt SSL termination, gzip compression, HTTP/2 & HSTS headers

Nginx AlpineTLSv1.3Rate-limit 100 req/s

PENDING

NŒUD 02•2.4 ms

RBAC Gateway & JWT Security

HMAC-SHA256 verification, role hierarchy (Owner/Admin/Member) & CSRF protection

Argon2id HashingRole Hierarchy GuardCookie HttpOnly

ACTIVE

NŒUD 03•3.8 ms

Multi-Tenant Persistence & Isolation

Prisma relational schema, mandatory tenantId on every query, Zero Leakage

Prisma ClientCascade DeletionMulti-Tenant Indexing

PENDING

NŒUD 04•14.2 ms

Billing & Stripe Webhook Engine

Stripe HMAC cryptographic signature, idempotent processing & subscription sync

Stripe SDK v14Event Idempotency TableCustomer Portal

Cluster Latency & Isolation BaselineSub-15ms P99 latency target · Zero cross-tenant data leakage guaranteed by automated static analysis

P99: ~3.8msZero-Leak: 100%

2. Guided Architecture Stepper

Work through each milestone sequentially. Complete tasks and verify with automated tests.

0 / 4 Milestones Done (0%)

Milestone 1 of 4

Step 1: Database Modeling & Multi-Tenant Isolation

Defining the Prisma schema: Tenants, Users, Memberships, and Subscriptions.

Action Items & Implementation Tasks:

1Define Prisma schema requiring tenantId foreign key on every business resource
2Implement Prisma middleware intercepting findMany/findFirst queries to enforce tenantId
3Create a database seed script with two isolated organizations and test accounts

ADR-01Architectural Decision Record (ADR)

Multi-Tenant Data Isolation Strategy

Engineering Problem Context:The platform must host hundreds of corporate tenants with strict zero data leakage guarantees while minimizing operational costs.

Option A (Naive)DÉCONSEILLÉ

Dedicated Database per Tenant (Physical Isolation)

+ Absolute physical isolation

+ Independent backups and migrations per tenant

- Prohibitive infrastructure cost at scale

- Extreme operational migration complexity

Option B (Enterprise)RECOMMANDÉ

Shared Schema with Mandatory tenantId & Prisma Middleware (Recommended)

✓ Minimal cost & instant scalability

✓ Automated filtering injected via Prisma middleware

✓ Native multi-stage SQLite/PostgreSQL support

⚠ Requires rigorous static assertions against cross-tenant leaks

Why Big Tech uses this: 95% of modern enterprise B2B SaaS (Stripe, Notion, Linear) rely on this model to maximize margins while enforcing security through middleware guards.

datasource db {
  provider = "sqlite"
  url      = env("DATABASE_URL")
}

generator client {
  provider = "prisma-client-js"
}

model Organization {
  id           String       @id @default(cuid())
  slug         String       @unique
  name         String
  stripeCustId String?      @unique
  planTier     String       @default("free") // free, pro, enterprise
  memberships  Membership[]
  projects     Project[]
  createdAt    DateTime     @default(now())
}

model User {
  id           String       @id @default(cuid())
  email        String       @unique
  passwordHash String
  memberships  Membership[]
  createdAt    DateTime     @default(now())
}

// TODO 1: Définir le modèle Membership avec rôle (owner, admin, member)
// et contrainte d'unicité @@unique([userId, organizationId])
model Membership {
  id             String       @id @default(cuid())
  role           String       @default("member")
  userId         String
  organizationId String
  user           User         @relation(fields: [userId], references: [id], onDelete: Cascade)
  // TODO: Définir la relation Organization
}

// TODO 2: Définir le modèle Project avec isolation multi-tenant obligatoire (organizationId)
model Project {
  id             String       @id @default(cuid())
  title          String
  // TODO: Ajouter la clé étrangère organizationId et la relation Organization
}

main•UTF-8•TypeScript 5.x•Tab: 2

Harness ActiveLn 45, Col 1366

Audit test suite:npx prisma migrate dev && npm test tests/tenancy.test.ts

Ready for the next architecture component?

Chargement...

1. Select Your Architecture

B2B Multi-Tenant SaaS Engine & Stripe Subscriptions

Real-Time Multiplayer Code Battle Arena (WebSockets & Redis)

Algorithmic Trading Bot & Order Book Matching Engine

Enterprise RAG Engine & Vector Semantic Search

B2B Multi-Tenant SaaS Engine & Stripe Subscriptions

Enterprise Infrastructure Architecture

Edge Reverse Proxy & SSL

RBAC Gateway & JWT Security

Multi-Tenant Persistence & Isolation

Billing & Stripe Webhook Engine

2. Guided Architecture Stepper

Step 1: Database Modeling & Multi-Tenant Isolation

Multi-Tenant Data Isolation Strategy

Dedicated Database per Tenant (Physical Isolation)

Shared Schema with Mandatory tenantId & Prisma Middleware (Recommended)

1. Select Your Architecture

B2B Multi-Tenant SaaS Engine & Stripe Subscriptions

Real-Time Multiplayer Code Battle Arena (WebSockets & Redis)

Algorithmic Trading Bot & Order Book Matching Engine

Enterprise RAG Engine & Vector Semantic Search

B2B Multi-Tenant SaaS Engine & Stripe Subscriptions

Enterprise Infrastructure Architecture

Edge Reverse Proxy & SSL

RBAC Gateway & JWT Security

Multi-Tenant Persistence & Isolation

Billing & Stripe Webhook Engine

2. Guided Architecture Stepper

Step 1: Database Modeling & Multi-Tenant Isolation

Multi-Tenant Data Isolation Strategy

Dedicated Database per Tenant (Physical Isolation)

Shared Schema with Mandatory tenantId & Prisma Middleware (Recommended)