Files
pos-system/apps/web-client-tpos-net
Ho Ngoc Hai a7a753bf38 feat: EOD reports, security audit (rate limiting + 44 validators), and 30 critical path tests
EOD Reports & Daily Close (order-service + Blazor UI):
- GetEodReportQuery: Dapper query for revenue, orders, payment breakdown, top items, hourly chart
- CloseDayCommand: check pending orders, generate final report
- EodReport.razor: 6 KPI cards, donut/bar charts, top 10 table, close-day dialog
- FluentValidation for both query and command
- BFF proxy endpoints for reports

Security Audit — Rate Limiting:
- Tighten auth-ratelimit from 100 to 10 req/min (brute force protection)
- Add payment-ratelimit (30/min), api-ratelimit (100/min), hub-ratelimit (500/min)
- Apply rate limits to ALL Traefik routers (previously many had none)

Security Audit — Input Sanitization (44 missing validators created):
- iam-service: 14 validators (auth, user, role commands)
- merchant-service: 11 validators (admin, attendance commands)
- wallet-service: 7 validators (wallet, points commands)
- fnb-engine: 7 validators (session, table, ticket, reservation)
- catalog-service: 6 validators (product, category CRUD)
- storage-service: 6 validators (upload, share, quota)
- order-service: 2 validators (complete order/payment)

Critical Path Unit Tests (30 new tests):
- inventory-service: 12 tests (deduction, partial stock, idempotency)
- wallet-service: 14 tests (create payment, process callback, domain events)
- fnb-engine: 8 tests (kitchen-served event handler, inventory client integration)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-06 16:33:39 +07:00
..

WebClientTpos - Blazor Web App .NET 10

EN: English Documentation
VI: Tài liệu Tiếng Việt

Base frontend web application cho GoodGo Platform được xây dựng với Blazor WebAssembly + BFF Pattern.

Architecture / Kiến trúc

┌─────────────────────────────────────────────────────────────────────┐
│                           Browser                                    │
│  ┌─────────────────────────────────────────────────────────────┐   │
│  │              Blazor WebAssembly Client                        │   │
│  └─────────────────────────────────────────────────────────────┘   │
└────────────────────────────────┬────────────────────────────────────┘
                                 │ /api/*
                                 ▼
┌─────────────────────────────────────────────────────────────────────┐
│                    BFF (Backend for Frontend)                        │
│                   WebClientTpos.Server + YARP                        │
│  ┌─────────────────────────────────────────────────────────────┐   │
│  │ Routes:  /api/iam/**       → iam-service                     │   │
│  │          /api/merchants/** → merchant-service                │   │
│  │          /api/catalog/**   → catalog-service                 │   │
│  │          /api/orders/**    → order-service                   │   │
│  └─────────────────────────────────────────────────────────────┘   │
└────────────────────────────────┬────────────────────────────────────┘
                                 │ Internal Network
                                 ▼
┌─────────────────────────────────────────────────────────────────────┐
│                        Microservices                                 │
│   ┌──────────┐   ┌──────────┐   ┌──────────┐   ┌──────────┐        │
│   │   IAM    │   │ Merchant │   │ Catalog  │   │  Order   │        │
│   │ :5101    │   │  :5102   │   │  :5103   │   │  :5104   │        │
│   └──────────┘   └──────────┘   └──────────┘   └──────────┘        │
└─────────────────────────────────────────────────────────────────────┘

Tech Stack

Layer Technology
Client Blazor WebAssembly (.NET 10)
BFF ASP.NET Core + YARP Reverse Proxy
Shared Class Library với Data Annotations
Styling CSS Variables, Dark Mode

Getting Started / Bắt đầu

cd apps/web-client-base-net
dotnet restore
dotnet run --project src/WebClientTpos.Server

# Open http://localhost:5091

Project Structure / Cấu trúc

web-client-base-net/
├── src/
│   ├── WebClientTpos.Client/       # Blazor WebAssembly
│   ├── WebClientTpos.Server/       # BFF with YARP Proxy
│   └── WebClientTpos.Shared/       # Shared DTOs
├── docs/
│   ├── en/                         # English docs
│   └── vi/                         # Vietnamese docs
└── Dockerfile

See detailed documentation in docs/en/ or docs/vi/.