# Tillo POS Software

Welcome to the **Tillo POS Software**, a comprehensive Canteen Automation Ecosystem. This project is designed to handle point-of-sale (POS), inventory management, user ordering, and administrative tasks for canteen operations.

## 🏗️ Ecosystem Architecture

The application is split into several interconnected modules:

1. **Backend (`/backend`)**
   - **Stack**: Java, Spring Boot, Maven, PostgreSQL.
   - **Purpose**: Serves as the core API for all frontend applications. Handles business logic, database transactions, and security.

2. **Admin & Counter Frontend (`/frontend`)**
   - **Stack**: React 19, TypeScript, Vite, Tailwind CSS, Recharts.
   - **Purpose**: The main dashboard for canteen administrators and counter staff to manage POS, inventory, and reports. Includes PDF generation and charts.

3. **Ordering Site (`/ordering_site`)**
   - **Stack**: React 19, TypeScript, Vite, Tailwind CSS, Framer Motion.
   - **Purpose**: The customer-facing application where users can browse the menu, place orders, and view order status.

4. **Counter Frontend (`/counter-frontend`)**
   - **Stack**: React 19, TypeScript, Vite, Tailwind CSS.
   - **Purpose**: A streamlined interface specifically for counter operations.

---

## 🔐 Security & Authentication

The system uses a robust **JWT-based Authentication** architecture to secure endpoints. 

### Critical: Security Configuration
To run this application securely, you **MUST** configure the following environment variables. Do **NOT** commit real secrets to the repository.

| Variable | Description | Example/Hint |
| :--- | :--- | :--- |
| `JWT_SECRET` | Secret key for signing tokens | `openssl rand -base64 32` |
| `DB_PASSWORD` | Database user password | Your PostgreSQL password |
| `MASTER_USER` | Initial admin email | `admin@example.com` |
| `MASTER_PASSWORD` | Initial admin password | `SecurePassword123` |

#### Setting Environment Variables:
- **Local Development**: Create a `.env` file or set them in your IDE (IntelliJ/Eclipse) Run Configurations.
- **Production**: Set them as System Environment Variables on your server or CI/CD platform.

### Security Features
- **Backend**: Protected by JWT guards (`JwtAuthFilter`, `JwtUtil`). Role-based access restricts sensitive endpoints (Orders, Wallets, Coupons) to authenticated users. Implements rate limiting (`LoginRateLimiter`) to prevent brute-force attacks.
- **Frontend**: Centralized API wrapper (`src/api.ts`) injects authentication headers automatically. `AuthContext` persists tokens securely.

---

## 🚀 How to Run

### Backend
1. Ensure Java 17+ and Maven are installed.
2. Navigate to the `backend` directory: `cd backend`
3. Update `src/main/resources/application.properties` with your database credentials and set the `jwt.secret` (or use environment variables).
4. Run the application: `./mvnw spring-boot:run`

### Frontends (`frontend`, `ordering_site`, `counter-frontend`)
1. Ensure Node.js (v18+) is installed.
2. Navigate to the desired frontend directory: `cd frontend` (or `ordering_site` / `counter-frontend`)
3. Install dependencies: `npm install`
4. Set up your `.env` file to point to the backend URL (e.g., `VITE_API_URL=http://localhost:8080`).
5. Run the development server: `npm run dev`

---

## 🛠️ Additional Tools & Scripts

- **`generate_report.py`**: A Python script used to generate deployment or analytics reports.
- **`push_to_git.bat`**: A quick batch script for Windows users to automate git commits and pushes.
- **`migrate_fetch.ps1`**: A PowerShell script in the `frontend` directory used to automate the transition of fetch calls to the secure API wrapper.

---
*Developed by the Canteen Automation Team.*