Complete and prepare social service for deployment

.gitignore

@@ -1 +1,42 @@
+# Dependencies
 node_modules
+.pnp
+.pnp.js
+
+# Testing
+coverage
+*.log
+
+# Next.js
+.next/
+out/
+build
+dist
+
+# Production
+.vercel
+.env*.local
+
+# Environment files
+.env
+.env.production
+
+# Debug
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+
+# OS
+.DS_Store
+Thumbs.db
+
+# IDE
+.vscode/
+.idea/
+*.swp
+*.swo
+*~
+
+# Misc
+.turbo
+.cache

README.md

@@ -8,12 +8,27 @@ This project is deployed on Vercel. Check out the live version at [basednet.verc
 
 ## Features
 
+### Core Features ✅
 - **Personal Websites**: Create and customize your own personal website with HTML, CSS, and JavaScript
 - **IPFS Integration**: Host your content on the decentralized IPFS network
 - **Webrings**: Join and create webrings to connect with like-minded creators
+  - Create your own webrings
+  - Join existing communities
+  - Navigate through webring members (next, previous, random)
 - **Windows 98 Aesthetic**: Enjoy a nostalgic user interface inspired by Windows 98
 - **User Profiles**: Customize your profile with bio, avatar, and social links
 - **Content Management**: Upload, manage, and pin your IPFS content
+- **User Discovery**: Browse and search for creators and their sites
+- **Input Validation**: All API endpoints protected with Zod schema validation
+- **Security**: Rate limiting, security headers, and input sanitization
+
+### Pages
+- **Home** (`/`): Platform overview and statistics
+- **Browse** (`/browse`): Discover and search for user sites
+- **Webrings** (`/webrings`): View, create, join, and manage webrings
+- **Dashboard** (`/dashboard`): Manage your IPFS content
+- **Profile** (`/profile`): Edit your profile and customize your site
+- **Help** (`/help`): Comprehensive documentation and FAQ
 
 ## Getting Started
 

next.config.js

@@ -0,0 +1,71 @@
+/** @type {import('next').NextConfig} */
+const nextConfig = {
+  reactStrictMode: true,
+  swcMinify: true,
+
+  // Performance optimizations
+  compress: true,
+  poweredByHeader: false,
+
+  // Image optimization
+  images: {
+    domains: ['ipfs.io', 'gateway.pinata.cloud', 'cloudflare-ipfs.com'],
+    formats: ['image/avif', 'image/webp'],
+  },
+
+  // Security headers
+  async headers() {
+    return [
+      {
+        source: '/:path*',
+        headers: [
+          {
+            key: 'X-DNS-Prefetch-Control',
+            value: 'on'
+          },
+          {
+            key: 'Strict-Transport-Security',
+            value: 'max-age=63072000; includeSubDomains; preload'
+          },
+          {
+            key: 'X-Content-Type-Options',
+            value: 'nosniff'
+          },
+          {
+            key: 'X-Frame-Options',
+            value: 'SAMEORIGIN'
+          },
+          {
+            key: 'Referrer-Policy',
+            value: 'strict-origin-when-cross-origin'
+          },
+          {
+            key: 'Permissions-Policy',
+            value: 'camera=(), microphone=(), geolocation=()'
+          }
+        ],
+      },
+    ]
+  },
+
+  // Webpack configuration
+  webpack: (config, { isServer }) => {
+    // Handle node modules that might need special treatment
+    if (!isServer) {
+      config.resolve.fallback = {
+        ...config.resolve.fallback,
+        fs: false,
+        net: false,
+        tls: false,
+      }
+    }
+    return config
+  },
+
+  // Environment variables that should be available client-side
+  env: {
+    NEXT_PUBLIC_IPFS_GATEWAY: process.env.IPFS_GATEWAY || 'https://ipfs.io/ipfs/',
+  },
+}
+
+module.exports = nextConfig

src/app/api/auth/[...nextauth]/route.ts

@@ -1,106 +1,5 @@
-import { NextAuthOptions } from 'next-auth';
 import NextAuth from 'next-auth/next';
-import { withTransaction } from '@/lib/db';
-
-export const authOptions: NextAuthOptions = {
-  providers: [
-    {
-      id: 'indieauth',
-      name: 'IndieAuth',
-      type: 'oauth',
-      authorization: {
-        url: 'https://indieauth.com/auth',
-        params: { scope: 'profile email' }
-      },
-      token: {
-        url: 'https://tokens.indieauth.com/token',
-      },
-      userinfo: {
-        url: 'https://indieauth.com/userinfo',
-        async request({ tokens, client }) {
-          // IndieAuth specific user info handling
-          return {
-            id: tokens.me,
-            name: tokens.name || tokens.me,
-            email: tokens.email,
-            image: tokens.photo,
-          };
-        },
-      },
-      profile(profile) {
-        return {
-          id: profile.id,
-          name: profile.name,
-          email: profile.email,
-          image: profile.image,
-        };
-      },
-      clientId: process.env.INDIE_AUTH_CLIENT_ID,
-      clientSecret: process.env.INDIE_AUTH_CLIENT_SECRET,
-    },
-  ],
-  callbacks: {
-    async signIn({ user, account, profile }) {
-      try {
-        await withTransaction(async (client) => {
-          // Check if user exists
-          const result = await client.query(
-            'SELECT * FROM users WHERE auth_domain = $1',
-            [profile.id]
-          );
-
-          if (result.rows.length === 0) {
-            // Create new user
-            await client.query(
-              'INSERT INTO users (username, auth_domain, email) VALUES ($1, $2, $3)',
-              [profile.name, profile.id, profile.email]
-            );
-
-            // Create empty profile
-            await client.query(
-              'INSERT INTO profiles (user_id) VALUES (currval(\'users_id_seq\'))'
-            );
-          }
-        });
-        return true;
-      } catch (error) {
-        console.error('Error during sign in:', error);
-        return false;
-      }
-    },
-    async session({ session, user }) {
-      try {
-        const result = await withTransaction(async (client) => {
-          const userResult = await client.query(
-            'SELECT * FROM users WHERE email = $1',
-            [session.user?.email]
-          );
-
-          if (userResult.rows[0]) {
-            return {
-              ...session,
-              user: {
-                ...session.user,
-                id: userResult.rows[0].id,
-                username: userResult.rows[0].username,
-              },
-            };
-          }
-          return session;
-        });
-        return result;
-      } catch (error) {
-        console.error('Error getting session:', error);
-        return session;
-      }
-    },
-  },
-  pages: {
-    signIn: '/auth/signin',
-    error: '/auth/error',
-  },
-  debug: process.env.NODE_ENV === 'development',
-};
+import { authOptions } from '@/lib/authOptions';
 
 const handler = NextAuth(authOptions);
 

src/app/api/ipfs/route.ts

@@ -1,6 +1,7 @@
 import { NextRequest, NextResponse } from 'next/server';
 import { getCurrentUser } from '../../../lib/auth';
 import { IpfsContentModel } from '../../../db/models/ipfs-content';
+import { createIpfsContentSchema, validateBody } from '../../../lib/validation';
 
 export async function GET(req: NextRequest) {
   try {
@@ -33,20 +34,23 @@ export async function POST(req: NextRequest) {
       return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
     }
 
-    const data = await req.json();
-    const { cid, contentType, filename, size } = data;
+    const body = await req.json();
 
-    if (!cid) {
+    // Validate input
+    const validation = validateBody(createIpfsContentSchema, body);
+    if (!validation.success) {
       return NextResponse.json(
-        { error: 'CID is required' },
+        { error: validation.error },
         { status: 400 }
       );
     }
 
+    const { cid, content_type, filename, size } = validation.data;
+
     const content = await IpfsContentModel.create(
       user.id,
       cid,
-      contentType,
+      content_type,
       filename,
       size
     );

src/app/api/profile/route.ts

@@ -1,6 +1,7 @@
 import { NextRequest, NextResponse } from 'next/server';
 import { getCurrentUser, requireAuth } from '../../../lib/auth';
 import { ProfileModel } from '../../../db/models/profile';
+import { updateProfileSchema, validateBody } from '../../../lib/validation';
 
 export async function GET(req: NextRequest) {
   try {
@@ -27,9 +28,19 @@ export async function PUT(req: NextRequest) {
       return NextResponse.json({ error: 'Unauthorized' }, { status: 401 });
     }
 
-    const data = await req.json();
-    const profile = await ProfileModel.update(user.id, data);
-
+    const body = await req.json();
+
+    // Validate input
+    const validation = validateBody(updateProfileSchema, body);
+    if (!validation.success) {
+      return NextResponse.json(
+        { error: validation.error },
+        { status: 400 }
+      );
+    }
+
+    const profile = await ProfileModel.update(user.id, validation.data);
+
     if (!profile) {
       return NextResponse.json(
         { error: 'Profile not found' },