ryan/lunarfront-app
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add PIN unlock flow to POS frontend planning

Browse Source
This commit is contained in:
Ryan Moon
2026-03-30 19:12:17 -05:00
parent ae3c85fee0
commit 07f199b69d
1 changed files with 22 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
planning/28_Frontend_Strategy.md
View File

@@ -59,11 +59,29 @@ The platform uses a single backend API with multiple purpose-built frontends. Ea
- Session management (clock in/out, cash drawer open/close, X/Z reports)
- Offline resilience — queue transactions if network drops, sync when back
**PIN unlock:**
The POS terminal stays authenticated but locks between use. Staff unlock with a 4-6 digit PIN instead of email/password. The PIN maps to their real user account — every action (sale, void, drawer open) is attributed to the person who unlocked.
- Each user sets a numeric PIN from their profile or admin assigns one
- PIN is stored as a bcrypt hash on the user record (separate from password)
- POS lock screen shows a numeric keypad — tap PIN, unlock, start selling
- Auto-locks after configurable idle timeout (default: 2 minutes)
- Manual lock button always visible
- Shift change: current user walks away, screen locks, next user enters their PIN
- Wrong PIN: brief delay, max 5 attempts then require full login
- PIN unlock issues a short-lived JWT (or extends the existing session) scoped to POS permissions
- Backend: `POST /v1/auth/pin-login` — accepts `{ pin }`, returns token with same user identity and permissions
- PIN is optional — users without a PIN set must use full email/password login on the POS
This gives full audit trail (who did what) without the friction of typing credentials hundreds of times a day.
**Key screens:**
1. **Sale screen** — product search (left), cart (right), totals + pay button (bottom)
2. **Payment screen** — amount due, payment method selection, card terminal status, change calculation
3. **Return/exchange screen** — lookup original transaction, select items, process refund
4. **Drawer management** — open session, cash drops, close session with counts
1. **Lock screen** — numeric keypad, current time, store name
2. **Sale screen** — product search (left), cart (right), totals + pay button (bottom)
3. **Payment screen** — amount due, payment method selection, card terminal status, change calculation
4. **Return/exchange screen** — lookup original transaction, select items, process refund
5. **Drawer management** — open session, cash drops, close session with counts
**Hardware integration:**
- Barcode scanner: keyboard wedge (types into focused input, no special API)