Sustainable Hardware Catalogue
Each item below is personally evaluated for developer workload performance, Linux compatibility, and long-term reliability. Specifications are drawn from manufacturer datasheets and independent benchmark sources.
Order Status Portal
Each order transitions through four states stored in Supabase. Enter your Order ID and email to query the current state and retrieve the DHL tracking reference.
Showing status for order
Technical Architecture
This platform is designed as a modern JAMstack application demonstrating production-level patterns relevant to senior software engineering roles. The following components form the core of the system.
Supabase (PostgreSQL)
Products, orders, returns and reviews are persisted in a normalised relational schema with Row Level Security (RLS) policies enforced at the database layer. Anon users can read active inventory; only authenticated service roles may write order state.
- RLS policies per table
- Real-time subscriptions (orders)
- Indexed on active + created_at
Dual-Gateway Checkout
Stripe handles international card payments via the Elements SDK. M-Pesa payments use the Safaricom Daraja STK Push API, triggering a payment prompt on the customer's handset. A Cloudflare Worker serves as the callback receiver, updating order state in Supabase upon confirmation.
- Stripe Elements (PCI DSS)
- M-Pesa Daraja OAuth 2.0
- Worker callback → DB update
Intelligent Shipping Engine
Shipping cost and carrier selection are computed client-side based on a zone lookup table (Nairobi / Rest of Kenya / International). DHL Express is integrated for tracked international fulfilment. The order tracking portal queries Supabase for live state transitions (Processing → Shipped → In Transit → Delivered).
- Zone-based cost calculation
- DHL tracking reference storage
- 4-state order machine
Authentication & Authorisation
Supabase Auth provides email/password and Google OAuth 2.0 flows. Checkout fields are pre-filled from authenticated user metadata, reducing friction. The admin gateway uses session-scoped PIN + Supabase service role — a pattern appropriate for low-traffic internal tooling while a full RBAC system is overkill.
- Supabase Auth (JWT)
- Google OAuth 2.0
- RLS + service role separation