KrikoriosandClaude Opus 5
8807ff41c5
Driver onboarding now photographs the licence, ID card and vehicle
registration and reads the credential fields off them, plus a camera-only
profile selfie riders check the arriving driver against. Adds in-app chat
and WebRTC calls, push-backed ride offers, ratings, cancellation and
payment sheets, settlement, and the owner dashboard endpoints behind them.
Camera permission on Android:
- Declare CAMERA and READ_MEDIA_IMAGES in the manifest. expo-image-picker's
own plugin never declares CAMERA, and Android denies a request for an
undeclared permission instantly and silently — no dialog is ever shown,
which is indistinguishable from the app not asking at all.
- Handle canAskAgain: once Android stops showing the dialog, repeating why
we need it is a dead end, so offer Open Settings instead (lib/capture-
permission.ts), matching what the location flow already did.
Session: a 401 on a request that carried a token now ends the session
instead of being reinterpreted per-screen — driver-home had been reading it
as "this user has no driver profile" and showing an onboarding form to an
already-onboarded driver. Requests without a token are exempt so a failed
sign-in doesn't sign you out, and the notification is latched per token so
concurrent polls tear the session down once. (root) gains the auth guard
that turns that into the sign-in screen; app/index.tsx only guarded the way
in, leaving a session that ended mid-screen with nowhere to go.
Also ignore .uploads/ — it holds driver licence, ID and vehicle scans plus
profile photos, which are personal data and must not be committed.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
49 lines
1.2 KiB
TypeScript
49 lines
1.2 KiB
TypeScript
// This file is needed to support autocomplete for process.env
|
|
export {};
|
|
|
|
declare global {
|
|
namespace NodeJS {
|
|
interface ProcessEnv {
|
|
// self-hosted auth
|
|
AUTH_JWT_SECRET: string;
|
|
GOOGLE_OAUTH_CLIENT_ID: string;
|
|
|
|
// postgres db url (self-hosted)
|
|
DATABASE_URL: string;
|
|
|
|
// expo api server url
|
|
EXPO_PUBLIC_SERVER_URL: string;
|
|
|
|
// google oauth client ids
|
|
EXPO_PUBLIC_GOOGLE_AUTH_WEB_CLIENT_ID: string;
|
|
EXPO_PUBLIC_GOOGLE_AUTH_IOS_CLIENT_ID: string;
|
|
EXPO_PUBLIC_GOOGLE_AUTH_ANDROID_CLIENT_ID: string;
|
|
|
|
// gmail smtp
|
|
SMTP_HOST: string;
|
|
SMTP_PORT: string;
|
|
SMTP_USER: string;
|
|
SMTP_PASS: string;
|
|
SMTP_FROM: string;
|
|
|
|
// geoapify api key
|
|
EXPO_PUBLIC_GEOAPIFY_API_KEY: string;
|
|
|
|
// google api key
|
|
EXPO_PUBLIC_GOOGLE_API_KEY: string;
|
|
|
|
// areeba payment gateway
|
|
AREEBA_API_BASE_URL: string;
|
|
AREEBA_MERCHANT_ID: string;
|
|
AREEBA_API_PASSWORD: string;
|
|
AREEBA_API_VERSION: string;
|
|
|
|
// in-app WebRTC audio calls (STUN for dev; TURN for production NAT)
|
|
EXPO_PUBLIC_STUN_URL: string;
|
|
EXPO_PUBLIC_TURN_URL: string;
|
|
EXPO_PUBLIC_TURN_USERNAME: string;
|
|
EXPO_PUBLIC_TURN_CREDENTIAL: string;
|
|
}
|
|
}
|
|
}
|