V2

.github/workflows/eslint.yml

@@ -34,6 +34,8 @@ jobs:
               run: |
                   npm install eslint@8.10.0
                   npm install @microsoft/eslint-formatter-sarif@2.1.7
+              env:
+                  PLANBY_AUTH_TOKEN: ${{ secrets.PLANBY_AUTH_TOKEN }}
 
             - name: Run ESLint
               run: npx eslint .

.github/workflows/firebase-hosting-merge-dev.yml

@@ -0,0 +1,38 @@
+name: Deploy to Firebase Hosting on merge (DEV)
+on:
+    push:
+        branches:
+            - dev
+jobs:
+    build_and_deploy:
+        if: false
+        runs-on: ubuntu-latest
+        steps:
+            - uses: actions/checkout@v4
+              with:
+                  ref: dev
+            - uses: pnpm/action-setup@v3
+              with:
+                  version: 8
+            - run: pnpm i && pnpm build --mode="preview"
+              env:
+                  VITE_FIREBASE_API_KEY: ${{ secrets.FIREBASE_API_KEY }}
+                  VITE_FIREBASE_AUTH_DOMAIN: ${{ secrets.FIREBASE_AUTH_DOMAIN }}
+                  VITE_FIREBASE_PROJECT_ID: ${{ secrets.FIREBASE_PROJECT_ID }}
+                  VITE_FIREBASE_STORAGE_BUCKET: ${{ secrets.FIREBASE_STORAGE_BUCKET }}
+                  VITE_FIREBASE_MESSAGING_SENDER_ID: ${{ secrets.FIREBASE_MESSAGIN_SENDER_ID }}
+                  VITE_FIREBASE_APP_ID: ${{ secrets.FIREBASE_APP_ID }}
+                  VITE_FIREBASE_MEASUREMENT_ID: ${{ secrets.FIREBASE_MEASUREMENT_ID }}
+                  VITE_GOOGLE_CLIENT_ID: ${{ secrets.GOOGLE_CLIENT_ID }}
+                  VITE_APP_ENV: preview
+                  VITE_APP_CHECK_KEY: ${{ secrets.FIREBASE_APP_CHECK_KEY }}
+                  VITE_APPLICATIONS_COLLECTION: ${{ secrets.APPLICATIONS_COLLECTION }}
+                  VITE_TICKETS_COLLECTION: ${{ secrets.TICKETS_COLLECTION }}
+                  VITE_RSVP_COLLECTION: ${{ secrets.RSVPS_COLLECTION }}
+            - uses: FirebaseExtended/action-hosting-deploy@v0
+              with:
+                  repoToken: "${{ secrets.GITHUB_TOKEN }}"
+                  firebaseServiceAccount: "${{ secrets.FIREBASE_SERVICE_ACCOUNT_HAWKHACKS_DASHBOARD }}"
+                  projectId: "${{ secrets.FIREBASE_PROJECT_ID }}"
+                  expires: 30d
+                  channelId: "${{ secrets.DEV_PREVIEW_CHANNEL }}"

.gitignore

@@ -33,3 +33,5 @@ coverage
 
 env.development
 env.production
+.runtimeconfig.json
+hawkhacks-googleWallet-key.json

.npmrc

@@ -0,0 +1 @@
+@nessprim:registry=https://npm.pkg.github.com/:_authToken=${PLANBY_AUTH_TOKEN}

config/firestore.rules

@@ -15,15 +15,24 @@ service cloud.firestore {
     }
 
   match /databases/{database}/documents {
-    // Allow read/write access to the user owns documents
-    // Allow read/write access if
-    // 1. document is new
-    // 2. document is not new and user is owner
-    match /users/{documentId} {
+    match /socials/{documentId} {
       allow read: if isAuthenticated() && (isAdmin() || isOwner(resource.data.id));
       allow write: if isAuthenticated() && isAdmin();
     }
 
+    match /user-profiles/{documentId} {
+      allow read: if isAuthenticated() && isAdmin();
+      allow write: if isAuthenticated() && isAdmin();
+    }
+
+    // RSVP Counter Collection Rules
+    match /rsvpCounter/{counterId} {
+        allow read, write: if isAuthenticated() && isAdmin();
+    }
+    match /rsvpCounter-dev/{counterId} {
+        allow read, write: if isAuthenticated() && isAdmin();
+    }
+
     // Tickets Collection Rules
     match /tickets/{ticketId} {
         // Only grant read perms to owner/admin
@@ -32,13 +41,48 @@ service cloud.firestore {
         allow write: if isAuthenticated() && isAdmin();
     }
 
+    match /passClasses/{passClassId} {
+        // Only grant read perms to owner/admin
+        allow read: if isAuthenticated() && (isAdmin() || isOwner(resource.data.userId));
+        // Only grant write perms to admin
+        allow write: if isAuthenticated() && isAdmin();
+    }
+
     // Applications Collection Rules
     match /applications/{applicationId} {
         // Only grant read access if you are owner/admin
         allow read: if isAuthenticated() && (isAdmin() || isOwner(resource.data.applicantId));
+        allow write: if isAuthenticated() && isAdmin();
+    }
+
+    // Teams Collection Rules
+    match /teams/{teamId} {
+        // this rule is to allow only admin to read,write
+        // because there is no way to filter out members
+        // beloging to the team in rules, so the process
+        // is done in cloud functions.
+        allow read, write: if isAuthenticated() && isAdmin();
+    }
+
+    // RSVP Verifications
+    match /rsvps/{rsvpId} {
+        // Only grant read access if you are owner/admin
+        allow read: if isAuthenticated() && (isOwner(resource.data.uid));
         allow write: if isAuthenticated();
     }
 
+    match /events/{eventId} {
+        // Only grant read access if you are owner/admin
+        allow read: if isAuthenticated();
+        allow write: if isAuthenticated() && isAdmin();
+    }
+
+    match /foods/{foodId} {
+        // Only grant read access if you are owner/admin
+        allow read: if isAuthenticated();
+        allow write: if isAuthenticated() && isAdmin();
+    }
+
     match /applications-dev/{applicationId} {
         allow read, write: if isAuthenticated() && isAdmin();
     }

config/storage.rules

@@ -7,7 +7,7 @@ service firebase.storage {
     match /b/{bucket}/o {
         match /resumes/{resumeId} {
             // allow read if owner or admin
-            allow read: if request.auth != null && resource.metadata.owner == request.auth.uid || request.auth.token.admin == true;
+            allow read: if true;
             allow write: if request.auth != null && request.resource.size <= 10 * 1024 * 1024;
         }
 

data/auth_export/accounts.json

@@ -0,0 +1 @@
+{"kind":"identitytoolkit#DownloadAccountResponse","users":[{"localId":"70w2DTUrhP0nOrpGPdYPOQZB4OdL","createdAt":"1713731714999","lastLoginAt":"1713731715000","displayName":"Orange Grass","photoUrl":"","passwordHash":"fakeHash:salt=fakeSaltuTKxpXZs5uA4aXPKBCOd:password=appleapple","salt":"fakeSaltuTKxpXZs5uA4aXPKBCOd","passwordUpdatedAt":1715314741980,"customAttributes":"{\"admin\":true,\"phoneVerified\":false}","providerUserInfo":[{"providerId":"apple.com","rawId":"5197066828709833349011045994434518544367","federatedId":"5197066828709833349011045994434518544367","displayName":"Orange Grass","email":"orange.grass.422@example.com","screenName":"grass_orange"},{"providerId":"password","email":"orange.grass.422@example.com","federatedId":"orange.grass.422@example.com","rawId":"orange.grass.422@example.com","displayName":"Orange Grass","photoUrl":""}],"validSince":"1715314741","email":"orange.grass.422@example.com","emailVerified":true,"disabled":false},{"localId":"SnS9WkYk7sC20mc8SaC4Prp5q1Lr","createdAt":"1713731654825","lastLoginAt":"1715099158461","displayName":"Orange Otter","photoUrl":"","passwordHash":"fakeHash:salt=fakeSalt2uagn6e8gbJXYaJov9RA:password=githubgithub","salt":"fakeSalt2uagn6e8gbJXYaJov9RA","passwordUpdatedAt":1715314741981,"customAttributes":"{\"admin\":true,\"phoneVerified\":false}","providerUserInfo":[{"providerId":"github.com","rawId":"7524388120055744086910460269249221994179","federatedId":"7524388120055744086910460269249221994179","displayName":"Orange Otter","email":"orange.otter.863@example.com","screenName":"otter_orange"},{"providerId":"password","email":"orange.otter.863@example.com","federatedId":"orange.otter.863@example.com","rawId":"orange.otter.863@example.com","displayName":"Orange Otter","photoUrl":""}],"validSince":"1715314741","email":"orange.otter.863@example.com","emailVerified":true,"disabled":false,"lastRefreshAt":"2024-05-10T05:32:59.885Z"},{"localId":"wJt2rCamFIfZlA184j89NEsP2gM5","createdAt":"1713731709751","lastLoginAt":"1715099205398","displayName":"Panda Orange","photoUrl":"","passwordHash":"fakeHash:salt=fakeSalt4LZFOGhZWWRDf0YRfuN3:password=googlegoogle","salt":"fakeSalt4LZFOGhZWWRDf0YRfuN3","passwordUpdatedAt":1715314741981,"customAttributes":"{\"admin\":false,\"phoneVerified\":false}","providerUserInfo":[{"providerId":"google.com","rawId":"6528640447034239187887946375673849584500","federatedId":"6528640447034239187887946375673849584500","displayName":"Panda Orange","email":"panda.orange.932@example.com","screenName":"orange_panda"},{"providerId":"password","email":"panda.orange.932@example.com","federatedId":"panda.orange.932@example.com","rawId":"panda.orange.932@example.com","displayName":"Panda Orange","photoUrl":""}],"validSince":"1715314741","email":"panda.orange.932@example.com","emailVerified":true,"disabled":false},{"localId":"xoRCSC0wt3Ep0R7NVz9w5Dvlrkco","createdAt":"1713731701751","lastLoginAt":"1713731701751","displayName":"Admin","photoUrl":"","passwordHash":"fakeHash:salt=fakeSalt9cF9rI2GKuz8ypojYGnf:password=adminadmin","salt":"fakeSalt9cF9rI2GKuz8ypojYGnf","passwordUpdatedAt":1715314741981,"customAttributes":"{\"admin\": true, \"phoneVerified\": true}","providerUserInfo":[{"providerId":"password","email":"admin@example.com","federatedId":"admin@example.com","rawId":"admin@example.com","displayName":"Admin","photoUrl":""}],"validSince":"1715314741","email":"admin@example.com","emailVerified":true,"disabled":false}]}

data/auth_export/config.json

@@ -0,0 +1 @@
+{"signIn":{"allowDuplicateEmails":false},"emailPrivacyConfig":{"enableImprovedEmailPrivacy":false}}

data/firebase-export-metadata.json

@@ -0,0 +1,16 @@
+{
+  "version": "13.7.1",
+  "firestore": {
+    "version": "1.19.4",
+    "path": "firestore_export",
+    "metadata_file": "firestore_export/firestore_export.overall_export_metadata"
+  },
+  "auth": {
+    "version": "13.7.1",
+    "path": "auth_export"
+  },
+  "storage": {
+    "version": "13.7.1",
+    "path": "storage_export"
+  }
+}

data/storage_export/buckets.json

@@ -0,0 +1,7 @@
+{
+  "buckets": [
+    {
+      "id": "hawkhacks-dashboard.appspot.com"
+    }
+  ]
+}

data/storage_export/metadata/6755cfde-b90e-4293-bbff-1d46f49c1607.json

@@ -0,0 +1,15 @@
+{
+  "name": "qrCodes/SnS9WkYk7sC20mc8SaC4Prp5q1Lr/5dfcb560-ef5f-496e-8009-c0d3a5f7b023.png",
+  "bucket": "hawkhacks-dashboard.appspot.com",
+  "metageneration": 2,
+  "generation": 1715053325103,
+  "contentType": "image/png",
+  "storageClass": "STANDARD",
+  "downloadTokens": [],
+  "etag": "WicePFdBdGgVuHWxDQVotFjCY9s",
+  "timeCreated": "2024-05-07T03:42:05.103Z",
+  "updated": "2024-05-07T03:42:05.112Z",
+  "size": 2422,
+  "md5Hash": "6XktdRZuaTIkhtTabQXQUw==",
+  "crc32c": "1678994227"
+}

data/storage_export/metadata/cc3c28e6-eaf0-4b69-9791-682c687a88c8.json

@@ -0,0 +1,15 @@
+{
+  "name": "qrCodes/SnS9WkYk7sC20mc8SaC4Prp5q1Lr/ab369ae4-656b-4c9e-a8dd-99884cb401e8.png",
+  "bucket": "hawkhacks-dashboard.appspot.com",
+  "metageneration": 2,
+  "generation": 1715053325100,
+  "contentType": "image/png",
+  "storageClass": "STANDARD",
+  "downloadTokens": [],
+  "etag": "C4d9WGSgls9jo/zVjl+rdHowo+I",
+  "timeCreated": "2024-05-07T03:42:05.100Z",
+  "updated": "2024-05-07T03:42:05.109Z",
+  "size": 2442,
+  "md5Hash": "ettZlNumOrvurFA32yGAiw==",
+  "crc32c": "31312871"
+}

firebase.json

@@ -21,7 +21,11 @@
     ],
     "hosting": {
         "public": "dist",
-        "ignore": ["firebase.json", "**/.*", "**/node_modules/**"],
+        "ignore": [
+            "firebase.json",
+            "**/.*",
+            "**/node_modules/**"
+        ],
         "rewrites": [
             {
                 "source": "**",

functions/.gitignore

@@ -7,3 +7,5 @@ typings/
 
 # Node.js dependency directory
 node_modules/
+
+.runtimeconfig.json

functions/package.json

@@ -16,12 +16,22 @@
     "main": "lib/index.js",
     "dependencies": {
         "@google-cloud/functions-framework": "^3.3.0",
+        "axios": "^1.6.8",
         "firebase-admin": "^12.1.0",
         "firebase-functions": "^4.9.0",
+        "google-auth-library": "^9.9.0",
+        "jsonwebtoken": "^9.0.2",
         "octokit": "^3.2.0",
+        "passkit-generator": "^3.1.11",
+        "qrcode": "^1.5.3",
+        "resend": "^3.2.0",
+        "uuid": "^9.0.1",
         "zod": "^3.22.4"
     },
     "devDependencies": {
+        "@types/jsonwebtoken": "^9.0.6",
+        "@types/qrcode": "^1.5.5",
+        "@types/uuid": "^9.0.8",
         "@typescript-eslint/eslint-plugin": "^5.12.0",
         "@typescript-eslint/parser": "^5.12.0",
         "eslint": "^8.9.0",