MEDIUM: No pagination on core list endpoints - returns all records #78

New Issue

Closed

opened 2026-05-31 12:03:44 -05:00 by null · 0 comments

null commented

2026-05-31 12:03:44 -05:00

Owner

Bug Description

Several core API endpoints return ALL records for a user with no pagination or limit:

GET /api/bills - returns all bills with correlated subquery (has_history_ranges, has_merchant_rule)
GET /api/categories - returns all categories
GET /api/subscriptions - returns all subscriptions
GET /api/tracker - returns full tracker data with payment aggregation

The bills query is especially expensive as it includes two EXISTS subqueries per row.

Impact

Performance degradation as user data grows. The tracker endpoint aggregates payment data across all months.

Recommended Fix

Add pagination support (limit/offset or cursor-based) to list endpoints. Consider adding a lightweight summary endpoint for the tracker that returns only the current month data.

## Bug Description Several core API endpoints return ALL records for a user with no pagination or limit: - GET /api/bills - returns all bills with correlated subquery (has_history_ranges, has_merchant_rule) - GET /api/categories - returns all categories - GET /api/subscriptions - returns all subscriptions - GET /api/tracker - returns full tracker data with payment aggregation The bills query is especially expensive as it includes two EXISTS subqueries per row. ## Impact Performance degradation as user data grows. The tracker endpoint aggregates payment data across all months. ## Recommended Fix Add pagination support (limit/offset or cursor-based) to list endpoints. Consider adding a lightweight summary endpoint for the tracker that returns only the current month data.