AmazonShop.lk

01 / The Challenge

The retailer operated walk-in only - no online ordering, no way to browse stock from home, and no digital sales channel for customers who preferred to shop online. The brief was to let customers browse, filter, add to cart and check out securely without visiting the store, while giving staff a clean admin dashboard to manage products, orders, customers and reviews without touching the database directly. The project was delivered sprint by sprint under a formal Agile process, with its own risk, quality and scheduling management alongside the build itself.

02 / Our Approach

The storefront is built with React, Vite and Zustand for lightweight state management, styled with Tailwind CSS and backed by an Axios service layer. Authentication was treated as its own system rather than a bolt-on: customer and administrator logins use separate JWT secrets, audiences, cookies and session records, with short-lived access tokens held only in memory and refresh tokens delivered as HttpOnly cookies, hashed before they ever reach the database. Refresh-token rotation includes a grace window so multiple tabs and concurrent requests don't incorrectly revoke a valid session, and genuine token reuse revokes the entire session family. On top of that, we integrated Google OAuth account linking and a Google Gemini-powered chatbot for customer support and product recommendations.

03 / Delivered Solution

The current build is frontend-first by design: the customer-facing pages, admin layout and checkout flow are built out, with the authentication, session and account-security layer already production-grade - OTP email verification, password recovery, session device/browser tracking, one-click revocation of other sessions, and account export/deletion with anonymisation that preserves order records for accounting and fraud prevention. Some storefront sections still use placeholder data while the payment gateway and remaining admin features are completed in later sprints.