🛡️ Sentinel: [CRITICAL] Fix predictable coupon and credit generation

[fatelessdev]

🚨 Severity: CRITICAL
💡 Vulnerability: Weak pseudo-random number generator Math.random() was used for generating sensitive security codes like coupons, store credits, and combo group IDs. This poses a cryptographic predictability risk, allowing potential adversaries to guess codes.
🎯 Impact: Attackers could guess valid bargain coupons or store credits generated for refunds, leading to financial loss for the platform.
🔧 Fix: Implemented generateSecureCode utility using Web Crypto API's crypto.getRandomValues() to securely generate unguessable string identifiers, without modulo bias. Replaced Math.random() with this utility in app/api/bargain/route.ts, lib/actions/admin.ts, and lib/cart-context.tsx. Added sentinel log to .jules/sentinel.md.
✅ Verification: Ran bun test to ensure successful implementation, passing all tests. Verified that linting passes and build is successful. Code review resulted in a #Correct# rating.

---

PR created automatically by Jules for task 9489481962573429517 started by @f4teless

[google-labs-jules]

👋 Jules, reporting for duty! I'm here to lend a hand with this pull request.

When you start a review, I'll add a 👀 emoji to each comment to let you know I've read it. I'll focus on feedback directed at me and will do my best to stay out of conversations between you and other bots or reviewers to keep the noise down.

I'll push a commit with your requested changes shortly after. Please note there might be a delay between these steps, but rest assured I'm on the job!

For more direct control, you can switch me to Reactive Mode. When this mode is on, I will only act on comments where you specifically mention me with @jules. You can find this option in the Pull Request section of your global Jules UI settings. You can always switch back!

New to Jules? Learn more at jules.google/docs.

---

For security, I will only act on instructions from the user who triggered this task.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
e-commerce	Ready	Preview, Comment	Apr 29, 2026 9:36am

[fatelessdev]

🤖 AI Code Review

📝 Summary & Verdict

This PR addresses a CRITICAL security vulnerability by replacing the insecure Math.random() function with a cryptographically secure pseudo-random number generator (CSPRNG) for generating sensitive codes (coupons, store credits, and combo group IDs). The changes include a new generateSecureCode utility using crypto.getRandomValues(), its integration across three key files, and a sentinel log entry for documentation.

Verdict: ✅ Approve
Estimated review effort: 🎯 1/5 | ⏱️ ~2 minutes

---

📝 Walkthrough

Walkthrough

The PR replaces predictable Math.random() usage with a secure CSPRNG implementation for generating sensitive identifiers. It introduces a new utility function and applies it consistently across the codebase.

Changes

File(s)	Summary
.jules/sentinel.md	Added security learning log about the vulnerability and fix
lib/utils.ts	Added generateSecureCode() function using Web Crypto API
app/api/bargain/route.ts	Replaced insecure coupon code generation with generateSecureCode()
lib/actions/admin.ts	Replaced insecure store credit code generation with generateSecureCode()
lib/cart-context.tsx	Replaced insecure combo group ID generation with generateSecureCode()
lib/bargain-discount.ts	Fixed typo: "upto" → "up to"

---

📊 Visualization

sequenceDiagram
    participant App as Application
    participant Utils as lib/utils.ts
    participant Crypto as Web Crypto API
    
    App->>Utils: generateSecureCode(prefix, length)
    Utils->>Crypto: crypto.getRandomValues(array)
    Crypto-->>Utils: Secure random bytes
    Utils->>Utils: Filter & map to charset
    Utils-->>App: Secure code string

Loading

---

Actionable comments posted: 0

Caution

No critical issues found that would block merging.

Warning

No major issues found requiring attention.

---

🧹 Nitpick comments (0)

No minor issues found.

---

Tip

No actionable issues found. The code looks good! ✅

---

💡 Suggestions & Improvements

• Performance: The generateSecureCode function is efficient and uses minimal crypto operations. Consider adding a length validation check (e.g., ensure length > 0) for defensive programming.
• Maintainability: The sentinel log is a good practice for security documentation. Consider adding similar logs for other security-critical changes in the future.
• Best Practices: The implementation correctly avoids modulo bias by filtering values. This is a solid CSPRNG implementation for code generation.

---

🤖 Fix all issues with AI agent

No issues to fix. The PR is ready for merge.

---

Powered by LetsReview