Lumiere Beauty — E-Commerce Platform
Production-Ready E-Commerce for a Premium Skincare & Beauty Brand
Demo Credentials
Admin
admin@gmail.com
123456
Project Overview
Lumiere Beauty is a complete, production-ready e-commerce platform for a premium skincare and beauty brand, built with a modern JavaScript/TypeScript stack and localized for the Bangladesh market. It consists of three independent applications working together through a REST API: a customer-facing Next.js storefront, a Next.js admin dashboard, and an Express + Prisma backend that manages the database and business logic. Features include a full catalog with variants and 3-level categories, a 3-step checkout with Bangladesh shipping zones and local payment methods (COD active, bKash/Nagad/SSLCommerz), a loyalty points program, a skin quiz and routine tracker, an OpenAI-powered AI toolkit, a fraud-detection system, real-time Socket.IO order updates, and complete analytics and reporting — all backed by a 40+ model Prisma schema.
Technology Stack
Frontend
Backend
Payments & Integrations
User Portals & Roles
Administrator
Full back-office control over the entire e-commerce operation — catalog, orders, customers, inventory, discounts, loyalty, content, analytics, and the AI toolkit.
- Dashboard with KPIs (revenue, orders, customers, AOV), revenue chart, and low-stock alerts
- Full product CRUD with variants (SKU/price/stock), combo items, attributes, and status workflow
- Order lifecycle management with status workflow, payment tracking, and real-time updates
- 5-tab inventory system: stock levels, movements, suppliers, physical counts, low-stock alerts
- Customer CRM with segments (VIP/at-risk/new/dormant), tags, block/unblock, and CSV export
- Coupon management (percent/fixed/BOGO/free shipping) and loyalty points configuration
- 6 exportable report types and full analytics with interactive Recharts
- 6 OpenAI-powered AI tools for descriptions, reviews, tagging, FAQ, and copywriting
Customer
Passwordless OTP storefront account — browse, shop, manage orders, addresses, wishlist, loyalty points, and the skin routine.
- Passwordless email OTP login with 401 auto-redirect to login
- Slide-out cart drawer with quantity controls, coupon codes, and free-shipping progress bar
- Wishlist with heart-toggle that works without login via localStorage
- Full-screen search overlay with debounced search and trending suggestions
- 3-step checkout with shipping zones and loyalty points redemption at checkout
- Order history with real-time status updates and cancel option
- Address book with labels (Home/Office/Other) and set-default
- Loyalty dashboard showing available, earned, and redeemed points
AI-Powered Features
AI Product Description Generator
Manual — admin invokes for a productGenerates marketing-ready product descriptions, short descriptions, meta titles, and meta descriptions from basic product inputs, dramatically speeding up the catalog setup.
Output: Complete bilingual-ready product copy set
Review Summarizer
Manual — admin or automated on review pageAggregates customer reviews into digestible themes with pros/cons, a sentiment score, and a short AI-driven summary shown to shoppers.
Output: Themed review summary with sentiment score
Auto-Tag & Recommendations
Manual — admin selects a productSuggests relevant tags, categories, and attributes for products, plus 'Similar products' and 'Frequently bought together' recommendations — all with one-click apply.
Output: Suggested tags, categories, and recommendations
Skin Quiz & Routine Insights
Quiz submission / routine streak milestoneThe storefront skin quiz produces personalized product recommendations from user answers, and the routine tracker unlocks AI-powered weekly insights after 7 days of logging.
Output: Personalized product recommendations and weekly insights
Database Architecture
40 models organized across 7 domains
Admin & Audit
Staff accounts with roles (super_admin, admin, manager, support), full activity logging, and in-app notifications.
Customer & Auth
Customer accounts with passwordless email/phone OTP login, verification codes, and labeled delivery addresses.
Product Catalog
Core product entity with SKU-level variant pricing, a 3-level nested category tree, dynamic attributes (skin type, concern, finish), combo bundles, and more.
Commerce
Shopping cart with local↔server sync, wishlist, full order lifecycle with status audit trail, and courier shipment tracking.
Payments, Discounts & Loyalty
Coupon codes (percent/fixed/BOGO/free shipping), and a full loyalty program with earn/redeem rates, balances, and transaction histories.
Inventory & Reviews
Inventory ledger, suppliers, physical count audits, moderated product reviews, and fraud flags with risk scoring.
Skin Quiz, CMS & Settings
Skin quiz answers and routine tracking with daily logs, banner/content management, shipping zones, and site configuration.
Security & Authentication
JWT Token Authentication
Admins use email/password login (JWT access + refresh). Customers use passwordless email or phone OTP (6-digit code) with token rotation.
Role-Based Access Control (RBAC)
Four admin roles — super_admin, admin, manager, support — each with granular module permissions enforced by middleware on every route.
CORS & HTTP Security
Helmet sets security headers (CSP, X-Frame-Options), CORS uses an explicit allow-list, and rate limiting caps general (100/min), OTP (3/15min), and login (5/15min) requests.
Input Validation & Fraud Detection
Zod validates every API payload, a profanity filter auto-moderates reviews, and a fraud engine scores suspicious orders 0–100 with a review workflow.
Password & Token Security
Passwords hashed with bcrypt, JWT with access + refresh token rotation, and separate secrets for access and refresh tokens.
PDF Document Generation
Sales Reports
Sales trend with period-over-period comparison, orders, revenue, and AOV
Product Performance
Units sold, revenue, and conversion rate per product
Inventory Valuation
Total inventory value and dead-stock analysis
Tax & Profit-Loss
Tax by period/region and P&L with COGS, gross profit, margins, and net profit
Deployment & Infrastructure
platform
Customer & Admin Storefronts: Vercel · Backend: Railway/Render/VPS
database
PostgreSQL (managed, e.g. Railway/Render)
storage
ImageKit CDN with AWS S3 backup
cron
Auto-confirm COD (hourly), auto-cancel unpaid (hourly), daily 30-day sales export at 2:00 AM
Resend (transactional OTP) + Nodemailer (SMTP admin notifications)
ai
OpenAI GPT-4o-mini — configurable via environment variable