chris
cdaf79ac71
Security: - Replace raw password cookie with HMAC-derived session token + constant-time compare - Add rate limiting (5 attempts / 15 min) to admin login - Atomic JSON writes via file-utils to prevent corruption on crash - Tighten CSP headers; add Square CDN to style-src and font-src - WebP conversion + 20 MB limit on admin image uploads Checkout reliability: - Delayed capture flow: pre-auth → calendar write → capture (never charge without booking) - Derive payment idempotency key from SHA-256(nonce) to prevent nonce/key mismatch on retry - Idempotency key persisted in localStorage; auto-retry on network failure - Idempotent CalDAV writes using orderId-based UIDs; treat 412 as success - User-friendly Square error messages instead of raw API detail strings UX: - Welcome modal + 5-step guided tour with spotlight and scroll-into-view - Balloon release agreement checkbox required before payment - 24-hour lead time enforced server-side in both delivery and pickup slot generators - Fix Square card form race condition with double-rAF before attach() - Tour hides Bulma modal-background for bright, unobscured modal steps Notifications: - Improved SMTP error logging; re-throw on failure so callers see it Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
39 lines
1.0 KiB
JSON
39 lines
1.0 KiB
JSON
{
|
|
"name": "beach-party-balloons-shop",
|
|
"version": "0.1.0",
|
|
"private": true,
|
|
"scripts": {
|
|
"dev": "next dev",
|
|
"build": "next build",
|
|
"start": "next start",
|
|
"lint": "next lint",
|
|
"setup:images": "cp -r ../website/assets/pics public/images && cp -r ../website/assets/logo public/images/logo && cp -r ../website/assets/trusted public/images/trusted && cp -rn ../website/assets/favicon public/"
|
|
},
|
|
"dependencies": {
|
|
"bulma": "^1.0.4",
|
|
"clsx": "^2.1.1",
|
|
"date-fns": "^3.6.0",
|
|
"ical.js": "^1.5.0",
|
|
"lucide-react": "^0.400.0",
|
|
"next": "14.2.21",
|
|
"nodemailer": "^8.0.5",
|
|
"react": "^18.3.1",
|
|
"react-dom": "^18.3.1",
|
|
"sharp": "^0.34.5",
|
|
"square": "^34.0.0",
|
|
"tsdav": "^2.0.11"
|
|
},
|
|
"devDependencies": {
|
|
"@types/node": "^20",
|
|
"@types/nodemailer": "^8.0.0",
|
|
"@types/react": "^18",
|
|
"@types/react-dom": "^18",
|
|
"autoprefixer": "^10.4.19",
|
|
"eslint": "^8",
|
|
"eslint-config-next": "14.2.21",
|
|
"postcss": "^8",
|
|
"tailwindcss": "^3.4.4",
|
|
"typescript": "^5"
|
|
}
|
|
}
|