Ali's Store

Bilingual + RTL throughout — a single translation helper and a design system built on CSS logical properties, so Arabic mirrors with no duplicate styles.

RBAC admin panel — view/manage permission per area (orders, products, customers, discounts, roles), custom roles, per-user revokes, and a delegation ceiling so staff can't escalate their own access.

Security-first auth — JWT access tokens with rotating refresh tokens and reuse detection, step-up re-auth for sensitive actions, Argon2, account lockout, email verification, and uniform rejections to resist account enumeration.

Checkout built for cash-on-delivery — email-OTP verification, coupons and catalog discounts resolved live, per-governorate delivery fees, guest order tracking by signed token, and an advisory lock that serialises a shopper's concurrent checkouts.

Owner-controlled home page — featured collections, full-width image banners, and best-seller/new/on-sale smart rows, each slotted into a single ordering system by the admin.

Lenient catalogue search — punctuation- and plural-insensitive with a small apparel synonym map, backed by a Postgres trigram index.

Anti-abuse — admin blacklist, automatic order-velocity flagging, and customer account blocking with a clear reason shown at sign-in.

Analytics — first-party sales, inventory, and customer aggregation plus GA4 traffic and funnel tracking.