feat: modernize webstore security, checkout, and responsive UI

Author: ThomasRoyProjects

.DS_Store

@@ -0,0 +1,10 @@
+.git
+.github
+.gradle
+build
+data
+uploads
+.DS_Store
+**/.DS_Store
+*.log
+.env

.dockerignore

@@ -0,0 +1,11 @@
+# Copy to .env and replace every placeholder before running Docker Compose.
+MYSQL_PASSWORD=replace-with-a-long-random-database-password
+MYSQL_ROOT_PASSWORD=replace-with-a-different-long-random-root-password
+
+# Optional host port; defaults to 8080 when omitted.
+WEBSTORE_PORT=8080
+
+# Optional one-time administrator bootstrap.
+APP_ADMIN_BOOTSTRAP_ENABLED=true
+APP_ADMIN_EMAIL=portfolio-admin@example.com
+APP_ADMIN_PASSWORD=replace-with-a-strong-unique-admin-password

.env.example

@@ -0,0 +1,32 @@
+name: CI
+
+on:
+  push:
+    branches: [main, master]
+  pull_request:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  test-and-build:
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v4
+
+      - name: Set up Java 17
+        uses: actions/setup-java@v4
+        with:
+          distribution: temurin
+          java-version: '17'
+          cache: gradle
+
+      - name: Run tests
+        run: ./gradlew --no-daemon test
+
+      - name: Build container image
+        run: docker build --tag webstore:ci .

.github/workflows/ci.yml

@@ -38,32 +38,24 @@ out/
 
 ### OS / Editor Junk ###
 .DS_Store
-<<<<<<< HEAD
-src/.DS_Store
-src/main/.DS_Store
-src/main/resources/.DS_Store
-.DS_Store
-.DS_Store
-=======
 Thumbs.db
 Desktop.ini
 
 ### Local App Data / Runtime Artifacts ###
 *.log
 *.tmp
 *.swp
+/data/
+/uploads/
 
 ### Local Environment / Secrets ###
 .env
 .env.*
+!.env.example
 application-local.properties
-application-dev.properties
 src/main/resources/application-local.properties
-src/main/resources/application-dev.properties
 
 ### Local Databases ###
 *.db
 *.sqlite
 *.sqlite3
->>>>>>> bd6444a68f11d9a3db5c157692385fabb6dfccc0
-.DS_Store

.gitignore

@@ -0,0 +1,31 @@
+# Changelog
+
+## 2026-07-14
+
+### Changed
+
+- Replaced shared global cart state with one server-side cart per HTTP session.
+- Rebuilt checkout around authoritative persisted product/tax data, transactional stock locking, `BigDecimal` money, immutable order lines, and persisted receipts.
+- Consolidated customer, order, catalog, image, and administrator route/service boundaries.
+- Replaced entity-bound forms with validated request DTOs and canonical role handling.
+- Reworked the storefront, cart drawer, checkout, authentication, and product administration UI for responsive layouts, keyboard operation, visible async states, semantic markup, and accessible labels.
+- Replaced usernames with normalized email addresses across registration, customer login, administrator login, persistence, bootstrap configuration, and authentication.
+- Matched authentication action widths, widened the storefront cart control, and redesigned administrator login/product creation as centered responsive cards with deliberate upload-area padding.
+- Split development and production configuration; development uses local H2 while production uses environment-provided MySQL credentials.
+- Added Flyway schema migrations, health endpoints, a private durable MySQL Compose service, and a reproducible non-root container image.
+- Upgraded Spring Boot from 3.4.1 to 3.5.16 and removed the unused Lombok dependency/configuration.
+- Normalized Java packages, separated request DTOs from persistence models, and added GitHub Actions test/container CI.
+- Replaced placeholder documentation with architecture, setup, security, routes, screenshots, environment template, and MIT licensing.
+
+### Fixed
+
+- Removed public registration privilege injection, default administrator credentials, role rewrites, CSRF bypasses, duplicate email races, and overly broad admin authorization.
+- Removed browser-authoritative pricing/tax/shipping, duplicate checkout creation, cross-session cart leakage, destructive schema recreation, debug logging, and committed credentials.
+- Removed payment-card collection from the simulated checkout flow.
+- Added safe decoded-image validation, generated filenames, upload size/dimension limits, and path containment.
+- Removed duplicate routes, dead controllers/templates/scripts, generated repository junk, and committed merge markers.
+
+### Verification
+
+- Added integration coverage for registration privilege boundaries, case-insensitive duplicate emails, email-only authentication, session cart isolation, authoritative checkout totals, stock mutation, receipt persistence, and repeated empty checkout rejection.
+- Exercised local H2 and containerized MySQL startup, email-based customer and administrator authentication, customer checkout, administrator image/product management, responsive layouts, health checks, and persistence across an application-container restart.

CHANGELOG.md

@@ -1,16 +1,25 @@
-# Use an OpenJDK image
-FROM openjdk:17
+FROM eclipse-temurin:17-jdk-jammy@sha256:723151f3fc88ca2060153ee08ab8dbbea7983d6ed6f2622fe440acf178737c94 AS build
+WORKDIR /workspace
 
-# Set the working directory inside the container
-WORKDIR /app
+COPY gradlew settings.gradle build.gradle ./
+COPY gradle gradle
+RUN chmod +x gradlew
+
+COPY src src
+RUN ./gradlew --no-daemon bootJar -x test
 
-# Copy only the specific JAR file
-COPY build/libs/webstore-0.0.1-SNAPSHOT.jar app.jar
+FROM eclipse-temurin:17-jre-jammy@sha256:475d8e96b4b2bfe08999e5e854755c773af1581acdf959a4545d88f0696a2339
+RUN groupadd --system webstore \
+    && useradd --system --gid webstore --home-dir /app --shell /usr/sbin/nologin webstore
 
-COPY src/main/resources/static/images /app/src/main/resources/static/images
+WORKDIR /app
+COPY --from=build --chown=webstore:webstore /workspace/build/libs/webstore-0.0.1-SNAPSHOT.jar app.jar
+RUN mkdir -p /app/uploads && chown webstore:webstore /app/uploads
 
-# Expose the application port
+USER webstore
 EXPOSE 8080
 
-# Run the application
-ENTRYPOINT ["java", "-jar", "app.jar"]
+HEALTHCHECK --interval=10s --timeout=3s --start-period=30s --retries=6 \
+  CMD curl --fail --silent --show-error http://127.0.0.1:8080/actuator/health > /dev/null || exit 1
+
+ENTRYPOINT ["java", "-jar", "/app/app.jar"]

Dockerfile

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Thomas Roy
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.