Demo production - dev
Inspired by sample-vue-shop
Serverless lambda function used for stripe
# install dependencies
$ yarn install
# serve with hot reload at localhost:3000
# service worker is disabled in dev
$ yarn dev
# build for production and launch server
$ yarn build
$ yarn start
For detailed explanation on how things work, checkout the Nuxt.js docs.
Hey cool project,
Hoping someone can help me
Where does it pull in the products from and how, Where does it process the stripe charge, Do you have a copy of the firebase function for the stripe backend?
cheers
First of all, thank you for your cool usage example.
if i use .now-secrets.json file it didn´t work, with .env file it is working almost (no errors, no products)
Everthing works fine in dev mode locally, but somehow i didn´t get products from my firebase realtime DB.
I imported the tests/mocks/products.json to my firebase relatime DB.
Here is the deployed example from your application: https://testshop-buefy.firebaseapp.com/
Usally there shouldn´t be an .env file needed, correct?
Do you have an idea why no products and no errors are shown?
Best Regards from Basel
Hi,
When trying to run this project, I am passing in the config, but firebase seems to think it is undefined. However, when I log the config object, I can see that it has the values and is being passed to firebase.initializeApp
Do you have any idea why this could be?
or only server?
# generate static project
$ yarn generate
no load site
Failed to load resource: the server responded with a status of 404 (Not Found)
default.a96880bbdce058c36780.js:1 Failed to load resource: the server responded with a status of 404 (Not Found)
index.38ecd1d8cc540867d916.js:1 Failed to load resource: the server responded with a status of 404 (Not Found)
vendor.af455663322d43c761ca.js:2 Uncaught ReferenceError: webpackJsonp is not defined
at vendor.af455663322d43c761ca.js:2
/_nuxt/pages/cart.cb9d77bc8b737b20f637.js:1 Failed to load resource: the server responded with a status of 404 (Not Found)
/_nuxt/pages/products/_slug.2f60c7f50f33d08c1cd7.js:1 Failed to load resource: the server responded with a status of 404 (Not Found)
app.c6f756e5d178a57112dc.js:1 Failed to load resource: the server responded with a status of 404 (Not Found)
/_nuxt/pages/uslugi.2652f535c873a52c80d9.js:1 Failed to load resource: the server responded with a status of 404 (Not Found)
logo.png:1 Failed to load resource: the server responded with a status of 404 (Not Found)
I have cloned buefy-shop for study purposes, but I didn't find instructions about how to populate my database. How can I do it? There is some way to import on firebase the database structure and some fake data to test on dev env? And how about product env? How should it work?
Hola @14nrv,
after upstream update the test almost runs fine, execept the firebase URL determination.
silvans-macbook-pro:buefy-shop silvan$ git commit -m "update from upstream and firebase deploy modifications"
✔ Running tasks for *.js
✔ Running tasks for *.vue
FAIL __tests__/components/Header.spec.js
● Test suite failed to run
FIREBASE FATAL ERROR: Can't determine Firebase Database URL. Be sure to include databaseURL option when calling firebase.initializeApp().
at fatal (node_modules/@firebase/database/dist/index.node.cjs.js:335:11)
at RepoManager.Object.<anonymous>.RepoManager.databaseFromApp (node_modules/@firebase/database/dist/index.node.cjs.js:14987:13)
at Object.instance.INTERNAL.registerService.Reference [as database] (node_modules/@firebase/database/dist/index.node.cjs.js:15526:130)
at FirebaseAppImpl.Object.<anonymous>.FirebaseAppImpl._getService (node_modules/@firebase/app/dist/index.cjs.js:134:66)
at FirebaseAppImpl.(anonymous function) [as database] (node_modules/@firebase/app/dist/index.cjs.js:323:31)
at Object.<anonymous> (plugins/firebase.js:24:22)
at Object.<anonymous> (store/modules/product/actions.js:9:17)
at Object.<anonymous> (store/modules/product/index.js:19:16)
at Object.<anonymous> (__tests__/__mocks__/fakeStore.js:17:16)
at Object.<anonymous> (__tests__/components/Header.spec.js:13:18)
If i see the __tests__/__mocks__/products.json i guess this should be the DB used by fakestore.js for testing, or?
Bumps ini from 1.3.5 to 1.3.8.
a2c5da8 1.3.8af5c6bb Do not use Object.create(null)8b648a1 don't test where our devdeps don't even workc74c8af 1.3.7024b8b5 update deps, add linting032fbaf Use Object.create(null) to avoid default object property hazards2da9039 1.3.6cfea636 better git push script, before publish instead of after56d2805 do not allow invalid hazardous string as section nameThis version was pushed to npm by isaacs, a new releaser for ini since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR@dependabot recreate will recreate this PR, overwriting any edits that have been made to it@dependabot merge will merge this PR after your CI passes on it@dependabot squash and merge will squash and merge this PR after your CI passes on it@dependabot cancel merge will cancel a previously requested merge and block automerging@dependabot reopen will reopen this PR if it is closed@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)@dependabot use these labels will set the current labels as the default for future PRs for this repo and language@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and languageYou can disable automated security fix PRs for this repo from the Security Alerts page.
Bumps elliptic from 6.5.3 to 6.5.4.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR@dependabot recreate will recreate this PR, overwriting any edits that have been made to it@dependabot merge will merge this PR after your CI passes on it@dependabot squash and merge will squash and merge this PR after your CI passes on it@dependabot cancel merge will cancel a previously requested merge and block automerging@dependabot reopen will reopen this PR if it is closed@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)@dependabot use these labels will set the current labels as the default for future PRs for this repo and language@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and languageYou can disable automated security fix PRs for this repo from the Security Alerts page.
Bumps pug from 2.0.4 to 3.0.1.
Sourced from pug's releases.
[email protected]
Bug Fixes
- Update
withto resolve core-js deprecation notice (#3259)[email protected]
Bug Fixes
Sanitise the
prettyoption (#3314)If a malicious attacker could control the
prettyoption, it was possible for them to achieve remote code execution on the server rendering the template. All pug users should upgrade as soon as possible, see #3312 for more details.[email protected]
Bug Fixes
- Properly handle non-string values when rethrowing errors (#3269)
[email protected]
Breaking Changes
- Drop support for node 6 and 8 (#3243)
Bug Fixes
- wrap setting err.message with a try/catch (#2996)
[email protected]
Breaking Changes
- Drop support for node 6 and 8 (#3243)
[email protected]
Breaking Changes
- Drop support for node 6 and 8 (#3243)
New Features
- Support
EachOfnodes (#3179)[email protected]
Breaking Changes
readplugins must now returnBufferif you want to support filters that userenderBuffer(#3213)Drop support for node 6 and 8 (#3243)
New Features
- File nodes now get a
rawproperty that is aBuffer, in addition to thestr(#3213)
... (truncated)
991e78f fix: sanitise and escape the pretty option (#3314)06baa52 Fix TypeScript and add eachOf token definition (#3262)13e46e9 chore: update with (#3259)c077df4 docs: fix rolling versions linkccba7da ci: publish canary release (#3257)24a7b8e chore: remove get-repo dependency (#3256)8288ec5 ci: fix some problems with the workflows and add dry-run (#3254)eca9342 chore: update is-expression and jest (#3253)9e96bb7 feat: allow filters to read non-text include files (#3213)bb0731f chore: use minimal settings to format test files (#3245)This version was pushed to npm by pug-bot, a new releaser for pug since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR@dependabot recreate will recreate this PR, overwriting any edits that have been made to it@dependabot merge will merge this PR after your CI passes on it@dependabot squash and merge will squash and merge this PR after your CI passes on it@dependabot cancel merge will cancel a previously requested merge and block automerging@dependabot reopen will reopen this PR if it is closed@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)@dependabot use these labels will set the current labels as the default for future PRs for this repo and language@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and languageYou can disable automated security fix PRs for this repo from the Security Alerts page.
Bumps pug-code-gen from 2.0.2 to 2.0.3.
eedf9a3 Don't ask escaping for boolean attributes at the beginning of attributes-list...6f38adf Add in additional resources of 2 packages (#2945)d86ac52 new maintainer for pypugjs (#2947)bd9e0de [pug-lexer] Relax class name requirements (#2948)af94a9f #2887 Reorganize other languages section (#2928)72fbf6a Apply filters to includes in right-to-left order (#2932)926f7c7 small spelling errors fixed (#2885)cb56c83 added pug template cache to other (#2868)201941a fixes #2863 (#2864)9cb96de fixes #2866 (#2867)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR@dependabot recreate will recreate this PR, overwriting any edits that have been made to it@dependabot merge will merge this PR after your CI passes on it@dependabot squash and merge will squash and merge this PR after your CI passes on it@dependabot cancel merge will cancel a previously requested merge and block automerging@dependabot reopen will reopen this PR if it is closed@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)@dependabot use these labels will set the current labels as the default for future PRs for this repo and language@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and languageYou can disable automated security fix PRs for this repo from the Security Alerts page.
Bumps axios from 0.18.1 to 0.21.1.
Sourced from axios's releases.
v0.21.1
0.21.1 (December 21, 2020)
Fixes and Functionality:
- Hotfix: Prevent SSRF (#3410)
- Protocol not parsed when setting proxy config from env vars (#3070)
- Updating axios in types to be lower case (#2797)
- Adding a type guard for
AxiosError(#2949)Internal and Tests:
Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub:
- Daniel Lopretto [email protected]
- Jason Kwok [email protected]
- Jay [email protected]
- Jonathan Foster [email protected]
- Remco Haszing [email protected]
- Xianming Zhong [email protected]
v0.21.0
0.21.0 (October 23, 2020)
Fixes and Functionality:
- Fixing requestHeaders.Authorization (#3287)
- Fixing node types (#3237)
- Fixing axios.delete ignores config.data (#3282)
- Revert "Fixing overwrite Blob/File type as Content-Type in browser. (#1773)" (#3289)
- Fixing an issue that type 'null' and 'undefined' is not assignable to validateStatus when typescript strict option is enabled (#3200)
Internal and Tests:
- Lock travis to not use node v15 (#3361)
Documentation:
Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub:
- Allan Cruz [email protected]
- George Cheng [email protected]
- Jay [email protected]
- Kevin Kirsche [email protected]
... (truncated)
Sourced from axios's changelog.
0.21.1 (December 21, 2020)
Fixes and Functionality:
- Hotfix: Prevent SSRF (#3410)
- Protocol not parsed when setting proxy config from env vars (#3070)
- Updating axios in types to be lower case (#2797)
- Adding a type guard for
AxiosError(#2949)Internal and Tests:
Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub:
- Daniel Lopretto [email protected]
- Jason Kwok [email protected]
- Jay [email protected]
- Jonathan Foster [email protected]
- Remco Haszing [email protected]
- Xianming Zhong [email protected]
0.21.0 (October 23, 2020)
Fixes and Functionality:
- Fixing requestHeaders.Authorization (#3287)
- Fixing node types (#3237)
- Fixing axios.delete ignores config.data (#3282)
- Revert "Fixing overwrite Blob/File type as Content-Type in browser. (#1773)" (#3289)
- Fixing an issue that type 'null' and 'undefined' is not assignable to validateStatus when typescript strict option is enabled (#3200)
Internal and Tests:
- Lock travis to not use node v15 (#3361)
Documentation:
Huge thanks to everyone who contributed to this release via code (authors listed below) or via reviews and triaging on GitHub:
- Allan Cruz [email protected]
- George Cheng [email protected]
- Jay [email protected]
- Kevin Kirsche [email protected]
- Remco Haszing [email protected]
- Taemin Shin [email protected]
... (truncated)
a64050a Releasing 0.21.1d57cd97 Updating changelog for 0.21.1 release8b0f373 Use different socket for Win32 test (#3375)e426910 Protocol not parsed when setting proxy config from env vars (#3070)c7329fe Hotfix: Prevent SSRF (#3410)f472e5d Adding a type guard for AxiosError (#2949)7688255 Remove the skipping of the socket http test (#3364)820fe6e Updating axios in types to be lower case (#2797)94ca24b Releasing 0.21.02130a0c Updating changelog for 0.21.0 releaseDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR@dependabot recreate will recreate this PR, overwriting any edits that have been made to it@dependabot merge will merge this PR after your CI passes on it@dependabot squash and merge will squash and merge this PR after your CI passes on it@dependabot cancel merge will cancel a previously requested merge and block automerging@dependabot reopen will reopen this PR if it is closed@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)@dependabot use these labels will set the current labels as the default for future PRs for this repo and language@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and languageYou can disable automated security fix PRs for this repo from the Security Alerts page.
Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity
:-------------------------:|-------------------------|:-------------------------|:-------------------------|:-------------------------
| 539/1000
Why? Has a fix available, CVSS 6.5 | Information Exposure
SNYK-JS-NODEFETCH-2342118 | No | No Known Exploit
(*) Note that the real score may have changed since the PR was raised.
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity
:-------------------------:|-------------------------|:-------------------------|:-------------------------|:-------------------------
| 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5 | Regular Expression Denial of Service (ReDoS)
SNYK-JS-AXIOS-1579269 | No | Proof of Concept
(*) Note that the real score may have changed since the PR was raised.
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
Nuxt.js Universal App with SSR via Firebase Functions and Firebase Hosting Host a Nuxt Universal app or site by combining Nuxt.js with Firebase Cloud
?? Ecommerce Store with Netlify Functions and Stripe A serverless function to pr
Vue shop App is a simple web application built using Vue js, HTML, CSS, and JavaScript
Build an end-to-end e-commerce App with Vue, Nuxt, and appbase.io (for building search). Uses Auth0 for authentication, Stripe for checkout, and Heroku / Vercel for deployment.
Serverless Invoices by Moku Serverless Invoices is a free invoicing tool for freelancers and small businesses. It is open-source and easily extendable
Sheiley Shop Content Description Features Get started ⭐ Frontend ?? API entry point Frontend production Backend ?? Database Backend production Extra D
⭐ Star us on GitHub — it motivates us a lot! ?? Aimeos Laravel ecommerce platform Aimeos is THE professional, full-featured and high performance e-com
Welcome to Fintechless Fintechless is an open source platform that simplifies orchestration and management of public cloud resources required to suppo
The enhavo CMS is a open source PHP project on top of the fullstack Symfony framework and uses awesome Sylius components to serve a very flexible soft
CSV to Link Tree This is my personal project as a free alternative to LinkTree. And make the advantage of CSV file to add the links. Built on Gridsome
infotech Project setup npm install Compiles and hot-reloads for development npm run serve Compiles and minifies for production npm run build Lints
vue-firebase-start Project setup npm install Compiles and hot-reloads for development npm run serve Compiles and minifies for production npm run bui
Stripe.js ES Module Use Stripe.js as an ES module. Note: To be PCI compliant, you must load Stripe.js directly from https://js.stripe.com. You cannot
Appwrite + Stripe integration showcase
Stripe Payment module for Vue Storefront Stripe Payment extension for vue-storefront, by Develo Design. Installation By hand (preferred): git clone ht
Vue Stripe Checkout Welcome to the Vue Stripe Checkout 3! This version is still incomplete, but please let me know what's missing or what you're expec
NFT Treasure Chest NFT Treasure Chest provide creators with multimedia data (files, pictures, audio, video) on-chain permanent storage and other core
Book-Trading-Club Book-Trading-Club: Trade or loan books with other book readers in your area. Built using Nodejs, Expressjs and mongoDB Special thank
vue-stack-cesium A minimal sample configuration project which shows how to combine and use certain packages and is a useful testing project for new up
![[Snyk] Security upgrade firebase from 8.3.0 to 8.10.1](https://avatars.githubusercontent.com/u/19733683?v=4)
282 Aug 20, 2022
1 Mar 8, 2022
2 Oct 6, 2022
12 Dec 19, 2022
370 Jan 3, 2023
45 Dec 17, 2022
3k Dec 26, 2022
8 Jul 1, 2022
80 Dec 14, 2022
2 Nov 7, 2021
0 Jan 20, 2022
1 Jan 3, 2022
447 Jan 6, 2023
7 Sep 4, 2022
26 Nov 28, 2022
0 Jan 10, 2021
4 Sep 23, 2022
20 Nov 21, 2022
14 Dec 23, 2022