PROJECT / PRODUCT
Lucsum
The storefront for Lucsum, my Indian streetwear brand from Saharanpur — a Next.js App Router store with authenticated customer flows, a staff-only Studio, a catalogue imported from Shopify, and Razorpay checkout with webhook verification.
Role
Solo · product engineering
Status
Open source · Live store
Year
2024–2026
Stack
Next.js · TypeScript · tRPC · Drizzle ORM · PostgreSQL · Better Auth · Razorpay · Tailwind CSS
At a glance
01 — The problem
A credible storefront needs authenticated customers, staff tooling, and payments where server totals stay authoritative — not a static product grid.
02 — My contribution
Implemented full-stack commerce flows with Better Auth, Drizzle on PostgreSQL, tRPC, and Razorpay checkout with webhook verification.
03 — The hard parts
- Checkout trust — server-side preview and create order flows so client cart state cannot override charged amounts.
- Webhook security — HMAC verification on Razorpay callbacks before updating order status.
- Staff vs customer surfaces — separate Studio routes with role checks documented in the repo.
04 — Key features
- Customer catalog, cart, and checkout
- Staff studio routes for operational work
- Server-authoritative checkout totals
- Health and readiness endpoints for deploys
05 — Key decisions
- Kept payment verification on the server with HMAC-checked webhooks instead of trusting client-side amounts.
- Structured the repo with production-minded boundaries (auth, migrations, seeds, tests) for my own brand's store.
06 — Result
Demonstrates server-authoritative checkout, authenticated flows, and staff operations in a single codebase — open source with a live demo.