Spaces:
Running
Running
Commit History
26 days ago
-
fix(cert): auto-issue certificate on payment confirmation & sync course to 100% certified
46ab86e
-
feat: normalize course titles into professional canonical titles and remove emojis across app
d08bef8
-
refactor(assessment): utilize active course context for LLM generation, increase timeout, configure hot-reload for dev server, and clean up legacy dead code
grimf237798
-
chore(seed): update premiumSeed.ts with latest curated video changes
b677888 -
chore(seed): update premiumSeed.ts with latest curated video changes
c31a7ed
-
new access code stuff
e677c14
-
π€ Add PixelConnect partnership integration for premium learning pathsβ
β¨ Features: - New PremiumFinalProject component for PixelConnect interns - Premium learning paths now end with Google form submission (same as non-premium flow) - All 15 steps remain intact as requested - Special PixelConnect branding and partnership messaging - Updated routing from PremiumProjectSubmit to PremiumFinalProject π― Changes: - Created src/pages/PremiumFinalProject.tsx with Google form integration - Updated App.tsx routing to use new component - Maintains existing 15-step learning structure - Uses same certification form as non-premium flow (https://forms.gle/kShUwiUWLkiDg3Bf6) π’ Partnership: - PixelConnect interns can now complete premium learning paths - Ends with Google form submission for project and payment - Professional certificates highlighting PixelConnect partnership - Career advancement messaging for internship performance568095b -
π Implement PixelConnect Access Code System - Complete Partnership Integrationβ
β¨ New Features: β’ 7 access codes for intern training programs (ML, FS, DS, FE, DA, GAI, AD) β’ Unified βΉ199 pricing for all PixelConnect courses β’ Complete user flow: code entry β validation β payment β course access β’ Real-time validation with user-friendly error handling β’ Multiple payment methods support (UPI, Cards, Net Banking, Wallets) π¨ UI/UX Components: β’ AccessCodeInput - Code validation and entry interface β’ AccessCodePayment - Comprehensive payment processing UI β’ AccessCodeSuccess - Celebration page with onboarding guidance β’ AccessCodeManager - Flow orchestration and state management π§ Backend Infrastructure: β’ Database schema with access_code_sessions table β’ Row-level security policies for data protection β’ Session management with progress tracking β’ Analytics table for usage monitoring π― Integration Points: β’ Seamless integration with Premium Learning Paths β’ GetCert β PixelConnect partnership branding β’ User authentication and session management β’ Existing premiumβ¦0e88b81 -
π SECURITY OVERHAUL: Complete production-ready security implementationβ
β MAJOR SECURITY FIXES: - Remove all console.log exposure of API keys and credentials - Implement secure serverless backend API proxy (/api/ai.ts) - Add production-safe logging system with credential sanitization - Configure build to strip all debug code in production - Fix all missing secure logger imports across entire codebase π‘οΈ BACKEND SECURITY: - Vercel serverless functions for secure API key management - Server-side AI API proxy prevents client credential exposure - Rate limiting and environment-based fallback handling - Complete separation of client/server environment variables π§ COMPREHENSIVE LOGGER AUDIT: - Fixed missing imports in 18+ files causing ReferenceError - All logger usage now properly imports secure logging system - Development-only logging with automatic production stripping - Credential sanitization prevents sensitive data leaks π¦ PRODUCTION HARDENING: - Terser build configuration strips console statements - Environment variable validation without value expβ¦d6ab07d
-
π CRITICAL SECURITY FIX: Remove all credential leaks from browser consoleβ
- Replace all console.log/error/warn with secure logger that only works in development - Created secureLogger.ts that automatically redacts sensitive data (API keys, user IDs, tokens) - Fixed duplicate logger imports that were breaking the build - Updated certificationAPI.ts to use secure logging (no more API keys/session IDs in console) - Enhanced environment security with secureEnvironment.ts validator - Updated supabase.ts to use secure configuration - Modified vite.config.ts to strip ALL console statements from production builds - Added security headers and build optimizations BEFORE: All API keys, user data, and credentials were visible in browser console AFTER: Zero sensitive data exposure - production builds have no logging whatsoever Production Security Status: π‘ IMPROVED (logging secured, API keys still need server proxy) Development Security: β SECURE (sensitive data redacted from logs)33927c8 -
Fix assessment evaluation system: Replace placeholder scores with real AI evaluationβ
- Enhanced certification API to use actual Gemini AI evaluation instead of placeholders - Added proper pass/fail logic with 60% threshold (scores below 60% now fail) - Updated Results component with conditional UI for passed vs failed assessments - Implemented retake functionality for failed assessments - Added comprehensive AI evaluation prompt with actual assessment questions - Enhanced scoring criteria: Beginner (60-75%), Intermediate (76-85%), Advanced (86-100%) - Added detailed feedback system to help students improve - Updated session status tracking for assessment failures - Modified CertificationFlowManager to handle assessment state and retakes - Added extensive debugging throughout the evaluation process - Created comprehensive test cases for assessment evaluation - Fixed all placeholder values (85 marks, A grade) with real evaluation results Assessment now properly evaluates student understanding and only allows progression to final project after demonstrating genuine compeβ¦abd2f2e
-
π Major Platform Revamp: Premium Learning Paths + Enhanced Certification Flow + Homepage Transformationβ
β¨ NEW FEATURES: - Premium Learning Paths with structured multi-step courses, badges, and mentorship - Enhanced AI-powered certification flow with real project generation - Completely revamped homepage showcasing new capabilities - Course session persistence system for seamless learning experience - Certification-focused navigation (removed chat-based UI) π¨ HOMEPAGE TRANSFORMATION: - Modern hero section with dual CTAs (Quick Certs vs Premium Paths) - Premium Learning Paths showcase with 6 comprehensive tracks - Enhanced Quick Certifications section (2-5 hour completions) - Updated features highlighting AI-powered + industry recognition - Professional gradient design with glassmorphism effects β‘ TECHNICAL IMPROVEMENTS: - New certification API with AI project generation - Premium topic detection system - Course session persistence with auto-resume - Sidebar restructured for certification-focused experience - Dashboard transformed from chat-based to certification-centric π§ SYSTEM ENHAβ¦e64b891
-
Initial commit: GetCert AI certification platform with chat interface and scroll fixes
7fa7b12