bauhaus-echo-web

mirror of https://github.com/Such-Software/bauhaus-echo-web.git synced 2026-10-17 05:51:24 +02:00

T

jwinterm c5dcf5cd2b web checkout: fail-closed CTA -> OIDC PKCE -> shop -> redemption

- app-config.js: public config placeholder (all null/false -> INERT). Operations
  populates OIDC client + shop tenant + checkout URL at deploy; no secrets.
- checkout.js: Authorization Code + S256 PKCE (public client, no secret), state CSRF
  guard, token in sessionStorage, code/state scrubbed from URL. Resolves premium via
  the ledger's per-user /me/entitlements (user's own OIDC token, never the shared
  read token) and sets window.SUCH_APP.premium for WebBillingManager. Redemption also
  resolves on page reload / next login (crypto is webhook-driven).
- index.html: load config+checkout in <head>; CTA calls SUCH_APP_startCheckout, else
  falls through to the store links (fail-closed). Store/itch buttons unchanged.

2026-08-01 10:34:19 -04:00

.github/workflows

ci: deploy Pages via GitHub Actions (legacy builder stalled on old commit)

2026-07-31 13:08:56 -04:00

assets

v1.5.0 web build — Puzzle mode + screensavers + free-pack; premium CTAs (primary funnel, secondary stores)

2026-07-31 12:59:21 -04:00

html

web: viewport pillarbox on wide/4K, crisp Linear fonts, silenced doinky SFX (main 71838a4)

2026-08-01 05:58:35 -04:00

.nojekyll

pages: add .nojekyll so GWT/SPA output is served verbatim (no Jekyll)