A comprehensive WeChat Mini Program for study room reservations with advanced backend infrastructure, featuring real-time booking management, integrated payment systems, membership tiers, administrative controls, and sophisticated caching mechanisms.
- Overview
- System Architecture
- Frontend Features
- Backend Features
- Technical Stack
- Project Structure
- API Documentation
- Setup & Development
- Deployment
- Contributing
- License
This study room booking system is a production-ready WeChat Mini Program that provides comprehensive room reservation management with a sophisticated backend architecture. The system supports real-time booking, payment processing, membership management, administrative controls, and advanced caching for optimal performance.
- WeChat Integration: Native WeChat Mini Program with official API integration
- Real-time Booking: Advanced seat selection with live availability updates
- Payment Processing: WeChat Pay integration with order management
- Membership System: Tiered membership with benefits and automatic management
- Admin Dashboard: Comprehensive administrative interface with batch operations
- Caching System: Multi-layer caching with intelligent invalidation
- Scalable Backend: Microservice-oriented architecture with connection pooling
- Framework: WeChat Mini Program Native Framework
- Language: TypeScript with WXSS styling
- State Management: Global App state with behavior-based components
- UI Pattern: Component-based architecture with reusable behaviors
- Build System: Native WeChat Developer Tools with TypeScript compilation
- Runtime: Node.js with Express.js framework
- Database: MySQL with connection pooling
- Caching: Multi-layer cache system with Redis-style operations
- Services: Microservice pattern with dependency injection
- Authentication: JWT-based with WeChat OAuth integration
- Monitoring: Centralized logging and error handling
- WeChat Login: Official WeChat OAuth integration
- Session Management: Persistent login with token refresh
- User Profiles: Avatar management and user information
- Ban System: Integrated ban information display with appeals
- Tab-based Navigation: 5-tab interface (Booking, My Bookings, Wallet & Membership, Self-service, Customer Service)
- Real-time Updates: Live room availability and booking status
- Search & Filter: Advanced room discovery with availability sorting
- Quick Actions: Fast access to common operations
- Room Discovery: Visual room browsing with images and details
- Availability Timeline: Interactive time-slot visualization
- Seat Selection: Advanced grid-based seat picker with real-time status
- Room Details: Comprehensive information with booking history
- Interactive Booking: Drag-and-drop time selection
- Conflict Detection: Real-time validation and collision prevention
- Price Calculation: Dynamic pricing with membership discounts
- Booking Confirmation: Multi-step confirmation with payment integration
- QR Code Generation: Check-in QR codes for booked seats
- Booking History: Complete booking lifecycle tracking
- Status Management: Real-time booking status updates
- Cancellation System: Flexible cancellation with fee calculation
- Batch Operations: Multi-booking management capabilities
- Check-in/Check-out: QR code-based attendance system
- Balance Management: Real-time balance tracking and recharge
- Payment Integration: WeChat Pay with order tracking
- Membership Tiers: Automatic tier management with benefits
- Coupon System: Advanced coupon management with validation
- Transaction History: Detailed financial transaction tracking
- Service Status: Real-time service availability
- QR Scanner: Integrated QR code scanning for check-ins
- Developer Tools: Debug panel for development/testing
- Dashboard: Comprehensive system overview
- User Management: User profiles, bans, and bulk operations
- Room Management: Room creation, editing, and layout management
- Batch Operations: Multi-user operations with progress tracking
- Tag Management: User categorization and automatic tagging
- Coupon Management: Coupon creation, distribution, and analytics
- Parameter Management: System configuration management
- Refund Review: Financial dispute resolution interface
- Announcement Creation: Rich text announcement composer
- Content Management: Announcement lifecycle management
- Preview System: Pre-publication preview functionality
- Distribution Control: Targeted announcement delivery
- Coupon Integration: Coupon application during recharge
- Payment Confirmation: Multi-step recharge confirmation
- Payment Methods: Multiple payment option support
- Navigation Bar: Custom navigation with dynamic titles
- Behaviors: Shared functionality modules
accordionBehavior.js: Collapsible content managementmodalBehavior.js: Modal dialog managementpageScrollBehavior.js: Scroll state managementpaginationBehavior.js: Data pagination handlingtabBarBehavior.js: Tab navigation management
- Access Control (
accessControl.ts): Permission management - API Integration (
api.ts): Centralized API communication - Configuration (
config.ts): Environment-based configuration - User Info Manager (
userInfoManager.ts): User session management - Monitoring (
monitoring.ts): Performance and error tracking - Markdown Support (
markdown.ts): Rich content rendering
- Base Service Pattern: Standardized service inheritance
- Instance Manager: Centralized service instance management
- Transaction Manager: Database transaction coordination
- Cache Manager: Multi-layer caching system
- Graceful Shutdown: Proper resource cleanup
- Connection Pooling: Optimized MySQL connection management
- Migration System: Version-controlled database schema updates
- Transaction Safety: ACID-compliant operations
- Query Optimization: Intelligent query caching and optimization
- JWT Authentication: Token-based authentication with refresh
- WeChat OAuth: Official WeChat login integration
- Role-based Access: Admin/user permission system
- Ban Management: User restriction system with appeal process
- Rate Limiting: API request throttling with role-based limits
- Auth Middleware: Request authentication validation
- Ban Check Middleware: User status validation
- Admin Middleware: Administrative access control
- Parameter Validation: Input validation and sanitization
- OpenResty Integration: High-performance rate limiting using OpenResty (a custom branch of NGINX with built-in Lua scripting)
- Role-Based Limits: Different rate limits for admin users vs regular users
- Intelligent Admin Bypass: Automatic admin role detection and bypass for privileged operations
- Request Classification: Automatic categorization of requests by sensitivity and operation type
- Real-time Monitoring: Live rate limiting statistics and health checking
- Granular Controls: Per-endpoint rate limiting with customizable thresholds
- Multi-tier Rate Limiting: Different limits for read, write, sensitive, and admin operations
- Smart Caching Integration: Rate limiting works seamlessly with backend cache layers
- Connection Pooling: Optimized upstream connections with load balancing
- HTTP/2 Support: Modern protocol support for improved performance
- Gzip Compression: Automatic response compression for bandwidth optimization
Administrative Routes (/admin)
- Write Operations (POST, PUT, DELETE, PATCH): Strict sensitive limits with admin bypass
- Read Operations (GET): Permissive admin_read limits for dashboard queries
- Purpose: Protects administrative functions while allowing efficient admin workflows
Authentication & Security Routes (/auth, /reset, /password)
- All Operations: Strict sensitive limits with admin bypass capability
- Purpose: Prevents brute force attacks and credential stuffing attempts
Membership Routes (/memberships)
- Purchase Operations (
/purchasePOST): Sensitive limits (financial operations) - Other Write Operations: Standard write limits
- Read Operations: Standard read limits
- Purpose: Protects financial transactions while allowing membership queries
User Membership Status (/my/membership)
- All Operations: Read limits (frequently accessed due to 5-minute cache TTL)
- Purpose: Handles high-frequency membership status checks from frontend
Booking & Batch Operations (/bookings, /batch)
- Write Operations: Strict write limits (resource-intensive operations)
- Read Operations: Standard read limits
- Purpose: Manages high-concurrency booking operations and prevents system overload
Default API Routes (All other endpoints)
- Write Operations: Standard write limits
- Read Operations: Standard read limits
- Purpose: Balanced protection for general API usage
Security Headers
- HSTS: Strict-Transport-Security with 2-year max-age, includeSubDomains, and preload
- Frame Protection: X-Frame-Options set to DENY to prevent clickjacking
- Content Type: X-Content-Type-Options set to nosniff to prevent MIME type confusion
- XSS Protection: X-XSS-Protection enabled with blocking mode
- Referrer Policy: strict-origin-when-cross-origin for privacy protection
- Permissions Policy: Restricts geolocation, microphone, and camera access
SSL/TLS Security
- Protocol Support: TLSv1.2 and TLSv1.3 only (deprecated protocols disabled)
- Modern Ciphers: ECDHE ciphers with AES-GCM and ChaCha20-Poly1305 for forward secrecy
- ECDH Curve: secp384r1 for enhanced elliptic curve cryptography
- Session Management: 10-minute session timeout with shared cache, session tickets disabled
- OCSP Stapling: Enabled with verification for certificate transparency
- Buffer Optimization: 8k SSL buffer size for optimal performance
HTTP/HTTPS Configuration
- Automatic Redirect: All HTTP traffic redirected to HTTPS (301 permanent redirect)
- HTTP/2 Support: Enabled for improved performance and multiplexing
- Server Tokens: Disabled to prevent server version disclosure
Health Check Endpoint (/health/rate-limit)
- Purpose: Real-time health status of the rate limiting system
- Access: Internal monitoring and alerting systems
- Response: JSON status indicating system health and any issues
- Logging: Access logging disabled to reduce monitoring noise
Statistics Endpoint (/stats/rate-limit)
- Purpose: Live rate limiting statistics and metrics
- Metrics Included: Request counts, rate limit hits, bypass counts, error rates
- Access: Administrative monitoring and performance analysis
- Response: Detailed JSON metrics for operational insights
- Usage: Performance monitoring, capacity planning, troubleshooting
Internal Subrequest Endpoints
- Role Check (
/auth_role_check): Fast user role validation for rate limiting decisions - Admin Bypass (
/auth_admin_bypass): Lua-based admin privilege verification - Purpose: Support high-performance rate limiting with minimal latency overhead
Operational Benefits
- Real-time Monitoring: Immediate visibility into rate limiting effectiveness
- Proactive Alerting: Early detection of rate limiting issues or attacks
- Performance Metrics: Data-driven optimization of rate limiting thresholds
- Troubleshooting: Detailed insights for diagnosing rate limiting problems
- Booking Controller: Complete booking lifecycle management
- Booking Status Service: Real-time status tracking
- Booking Cleanup Service: Automated booking maintenance
- Booking Cache Service: High-performance booking data caching
- Booking Config Service: Dynamic booking rule management
- Room Controller: Room CRUD operations
- Room Cache Service: Optimized room data caching
- Layout Management: Dynamic seat layout configuration
- Availability Engine: Real-time availability calculations
- User Service: User profile and preference management
- User Cache Service: Optimized user data caching
- User Session Cleanup: Automatic session maintenance
- Tag Management: User categorization and automatic tagging
- Payment Controller: WeChat Pay integration
- Transaction Controller: Financial transaction management
- Transaction Cleanup: Automated transaction maintenance
- Recharge System: Balance management with payment processing
- Coupon Management: Advanced coupon creation and validation
- Coupon Cache Service: High-performance coupon caching
- Coupon Cleanup Service: Automated coupon maintenance
- Membership Service: Tier management and benefit calculation
- Membership Purchase Service: Automated membership processing
- Multi-layer Caching: Application and database level caching
- Cache Invalidation: Intelligent cache refresh strategies
- Version Control: Cache version management for consistency
- Group Caching: Related data bundling for performance
- Selective Refresh: Targeted cache updates
- WeChat Auth Service: OAuth flow management
- WeChat Pay Service: Payment processing integration
- WeChat JSSDK Service: Frontend SDK support
- WeChat Notification Service: Push notification management
- WeChat Access Token Service: Token lifecycle management
- Self-Service Controller: Service status management
- System Controller: System health and configuration
- Developer Controller: Development and debugging tools
- Cache Controller: Manual cache management interface
- Framework: WeChat Mini Program Native
- Languages: TypeScript, WXSS, WXML
- Preprocessors: Less for styling
- Build Tools: WeChat Developer Tools
- UI Components: Native WeChat components
- State Management: App-level state with behavior patterns
- Runtime: Node.js 14+
- Framework: Express.js
- Database: MySQL 8.0+
- Languages: JavaScript (ES6+)
- Authentication: JWT + WeChat OAuth
- Payment: WeChat Pay API
- Logging: Morgan + Custom logging
- Process Management: PM2 (production)
- Version Control: Git
- API Testing: Postman/Thunder Client
- Database Tools: MySQL Workbench
- IDE: VS Code with WeChat Developer Tools
- Monitoring: Custom monitoring utilities
- Web Server: Express.js with Node.js runtime
- Reverse Proxy: OpenResty (a custom branch of NGINX) with built-in Lua scripting support
- Rate Limiting: Lua-based role-aware rate limiting with OpenResty (a custom branch of NGINX)
- SSL/TLS: HTTPS with modern TLS configuration and OCSP stapling
- Connection Pooling: MySQL2 connection pools with intelligent balancing
- Caching: Multi-layer caching with Redis-style operations and intelligent invalidation
- Load Balancing: Upstream connection pooling with health checks
- Security: Enhanced security headers and comprehensive SSL/TLS hardening
- Monitoring: Built-in rate limiting health checks and performance metrics
study-room-order/
├── miniprogram-1/ # WeChat Mini Program Frontend
│ └── miniprogram/
│ ├── pages/ # Core Application Pages
│ │ ├── login/ # User authentication
│ │ ├── home/ # Main booking interface
│ │ ├── my-bookings/ # Booking management
│ │ ├── recharge/ # Wallet and membership
│ │ ├── room-detail/ # Room information
│ │ ├── seat-selection/ # Seat selection interface
│ │ ├── payment/ # Payment processing
│ │ ├── booking-detail/ # Booking details view
│ │ ├── contact-service/ # Customer support
│ │ ├── self-service/ # Self-service tools
│ │ ├── ban-info/ # Ban information display
│ │ ├── room-info/ # Additional room details
│ │ └── developer-settings/ # Development tools
│ ├── packageAdmin/ # Administrative Interface
│ │ └── pages/
│ │ ├── admin-panel/ # Admin dashboard
│ │ ├── user-management/ # User administration
│ │ ├── room-management/ # Room administration
│ │ ├── batch-operations/ # Bulk operations
│ │ ├── coupon-management/ # Coupon administration
│ │ ├── tag-management/ # User tagging system
│ │ ├── param-management/ # System configuration
│ │ ├── refund-review/ # Financial dispute resolution
│ │ └── room-layout-edit/ # Room layout editor
│ ├── packageAnnouncement/ # Announcement System
│ │ └── pages/
│ │ ├── announcement/ # Announcement display
│ │ ├── announcement-edit/ # Announcement editor
│ │ ├── announcement-management/ # Announcement admin
│ │ └── announcement-preview/ # Preview interface
│ ├── packageRecharge/ # Enhanced Recharge Features
│ │ └── pages/
│ │ ├── coupons/ # Coupon selection
│ │ └── recharge-confirm/ # Payment confirmation
│ ├── packageUtils/ # Utility Pages
│ │ └── pages/
│ │ ├── cancel-confirm/ # Cancellation confirmation
│ │ ├── qr-generator/ # QR code generation
│ │ └── scan-handler/ # QR code scanning
│ ├── components/ # Reusable UI Components
│ │ └── navigation-bar/ # Custom navigation
│ ├── behaviors/ # Shared Behaviors
│ │ ├── accordionBehavior.js # Accordion functionality
│ │ ├── modalBehavior.js # Modal management
│ │ ├── pageScrollBehavior.js # Scroll handling
│ │ ├── paginationBehavior.js # Pagination logic
│ │ └── tabBarBehavior.js # Tab navigation
│ ├── utils/ # Frontend Utilities
│ │ ├── api.ts # API communication
│ │ ├── config.ts # Configuration management
│ │ ├── userInfoManager.ts # User session management
│ │ ├── accessControl.ts # Permission management
│ │ ├── monitoring.ts # Performance monitoring
│ │ └── [other utilities] # Additional utility modules
│ ├── images/ # Static Image Assets
│ ├── app.json # Mini Program configuration
│ ├── app.ts # Application entry point
│ └── app.wxss # Global styles
├── mysql/ # Backend API Server
│ ├── api/ # API Controllers
│ │ ├── authController.js # Authentication endpoints
│ │ ├── bookingController.js # Booking management
│ │ ├── roomController.js # Room management
│ │ ├── paymentController.js # Payment processing
│ │ ├── couponController.js # Coupon management
│ │ ├── membershipController.js # Membership management
│ │ ├── adminController.js # Administrative functions
│ │ ├── selfServiceController.js # Self-service features
│ │ ├── systemController.js # System management
│ │ ├── transactionController.js # Financial transactions
│ │ ├── tagController.js # User tagging
│ │ ├── announcementController.js # Announcement system
│ │ ├── wechatJSSDKController.js # WeChat SDK integration
│ │ ├── middleware/ # Express Middleware
│ │ │ ├── authMiddleware.js # Authentication validation
│ │ │ ├── adminMiddleware.js # Admin access control
│ │ │ └── banCheckMiddleware.js # User ban checking
│ │ └── routes.js # API route definitions
│ ├── services/ # Business Logic Services
│ │ ├── baseService.js # Base service class
│ │ ├── instanceManager.js # Service instance management
│ │ ├── transactionManager.js # Database transaction management
│ │ ├── cacheFetchService.js # Cache data fetching
│ │ ├── cacheInvalidationService.js # Cache invalidation
│ │ ├── cacheManager.js # Cache coordination
│ │ ├── bookingCacheService.js # Booking data caching
│ │ ├── userCacheService.js # User data caching
│ │ ├── roomCacheService.js # Room data caching
│ │ ├── couponCacheService.js # Coupon data caching
│ │ ├── membershipCacheService.js # Membership data caching
│ │ ├── bookingStatusService.js # Booking status management
│ │ ├── membershipStatusService.js # Membership status tracking
│ │ ├── bookingCleanupService.js # Automated booking cleanup
│ │ ├── userSessionCleanupService.js # Session maintenance
│ │ ├── couponCleanupService.js # Coupon maintenance
│ │ ├── transactionCleanupService.js # Transaction cleanup
│ │ ├── tagExpiryCleanupService.js # Tag maintenance
│ │ ├── wechatAuthService.js # WeChat authentication
│ │ ├── wechatPayConfigService.js # WeChat Pay configuration
│ │ ├── wechatNotificationService.js # Push notifications
│ │ ├── wechatAccessTokenService.js # WeChat token management
│ │ ├── wechatJSSDKService.js # WeChat JSSDK support
│ │ ├── sensitiveConfigService.js # Configuration management
│ │ └── [additional services] # Other business services
│ ├── database/ # Database Management
│ │ ├── create_tables_simplified.sql # Database schema
│ │ ├── init_data_simplified.sql # Initial data
│ │ ├── sample_coupons.sql # Sample coupon data
│ │ └── db.js # Database connection management
│ ├── utils/ # Backend Utilities
│ │ ├── apiResponseBuilder.js # Standardized API responses
│ │ ├── timezoneUtil.js # Timezone handling
│ │ ├── gracefulShutdown.js # Process cleanup
│ │ └── db.js # Database utilities
│ ├── config/ # Configuration Files
│ ├── server.js # Application entry point
│ └── package.json # Node.js dependencies
├── mysql-migrations/ # Database Migration Scripts
├── docs/ # Comprehensive Documentation
│ ├── README.md # This file
│ ├── cache-guide/ # Caching system documentation
│ ├── error-handling-guide/ # Error handling patterns
│ ├── service_layer/ # Service architecture guides
│ ├── instanceManager/ # Instance management documentation
│ └── [additional docs] # Feature-specific documentation
├── tests/ # Test Suite
│ ├── integration.test.ts # Integration tests
│ ├── performance.test.ts # Performance tests
│ ├── services/ # Service-specific tests
│ └── [test files] # Unit and integration tests
├── deprecated/ # Legacy Code Archive
└── debug-logs-and-images/ # Development Debug Resources
POST /api/auth/wechat/login # WeChat OAuth login
POST /api/auth/refresh # Token refresh
GET /api/user/info # User profile
PUT /api/user/info # Update profile
GET /api/bookings # User bookings
POST /api/bookings # Create booking
GET /api/bookings/:id # Booking details
PUT /api/bookings/:id/cancel # Cancel booking
POST /api/bookings/checkin # Check-in
POST /api/bookings/checkout # Check-out
GET /api/rooms # Room list
GET /api/rooms/:id # Room details
GET /api/rooms/:id/bookings # Room bookings
POST /api/payment/recharge # Create recharge order
GET /api/payment/status/:orderId # Check payment status
GET /api/transactions # Transaction history
GET /api/transactions/stats # Transaction statistics
GET /api/admin/rooms # Admin room management
POST /api/admin/rooms # Create room
PUT /api/admin/rooms/:id # Update room
DELETE /api/admin/rooms/:id # Delete room
GET /api/user/membership # Membership status
POST /api/coupons/apply # Apply coupon
GET /api/coupons/user # User coupons
- Node.js: Version 14.0.0 or higher
- MySQL: Version 8.0 or higher
- OpenResty: Latest stable version (a custom branch of NGINX with Lua scripting) for production rate limiting
- Alternative: Standard NGINX (rate limiting features will be disabled)
- SSL Certificate: Valid SSL certificate for HTTPS deployment
- WeChat Developer Tools: Latest version
- WeChat Mini Program Account: For testing and deployment
- OpenResty: Required for advanced rate limiting features (a custom branch of NGINX with built-in Lua scripting)
- Process Manager: PM2 recommended for production deployment
- SSL/TLS: Modern certificate with OCSP stapling support
-
Install WeChat Developer Tools
# Download from: https://developers.weixin.qq.com/miniprogram/dev/devtools/download.html -
Open Project in WeChat Developer Tools
- Open WeChat Developer Tools
- Select "Import Project"
- Choose
miniprogram-1/directory - Configure AppID in
project.config.json
-
Configure Development Environment
// utils/config.ts export const config = { apiBaseUrl: 'http://localhost:3000/api', environment: 'development' };
-
Install Dependencies
cd mysql npm install -
Database Setup
# Create database mysql -u root -p -e "CREATE DATABASE studyroom_booking;" # Import schema mysql -u root -p studyroom_booking < database/create_tables_simplified.sql # Import initial data mysql -u root -p studyroom_booking < database/init_data_simplified.sql
-
Environment Configuration
# Create configuration file cp config/config.example.js config/config.js # Edit database connection settings nano config/config.js
-
Start Development Server
npm run dev # Server will start on http://localhost:3000
# Apply migrations in chronological order
mysql -u root -p studyroom_booking < mysql-migrations/[timestamp]_migration_name.sql# Run integration tests
npm test
# Run specific test files
node tests/test_booking_fix.js
node tests/test_coupon_cleanup_fixed.js-
Server Configuration
# Install PM2 for process management npm install -g pm2 # Start production server pm2 start server.js --name "studyroom-api"
-
OpenResty Configuration with Rate Limiting
The production environment uses OpenResty (a custom branch of NGINX with built-in Lua scripting support) for Lua-based role-based rate limiting:
# /etc/nginx/sites-available/goldenlist-api (based on mysql/goldenlist.cn.conf) # HTTP to HTTPS redirect server { listen 80 default_server; listen [::]:80 default_server; return 301 https://$host$request_uri; } # Main API server with advanced rate limiting server { listen 443 ssl http2; listen [::]:443 ssl http2; server_name api.yourdomain.com; charset utf-8; server_tokens off; # Variables for Lua rate limiting and logging set $rate_limit_status "-"; set $rate_limit_key "-"; set $rate_limit_zone "-"; set $user_id "-"; set $user_role "-"; set $loc_group "-"; # Enhanced security headers add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always; add_header X-Frame-Options "DENY" always; add_header X-Content-Type-Options "nosniff" always; add_header X-XSS-Protection "1; mode=block" always; add_header Referrer-Policy "strict-origin-when-cross-origin" always; add_header Permissions-Policy "geolocation=(), microphone=(), camera=()" always; # SSL/TLS Configuration ssl_protocols TLSv1.2 TLSv1.3; ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305; ssl_prefer_server_ciphers on; ssl_session_cache shared:SSL:10m; ssl_session_timeout 10m; ssl_session_tickets off; ssl_stapling on; ssl_stapling_verify on; ssl_certificate /path/to/your/certificate.pem; ssl_certificate_key /path/to/your/private.key; # Gzip compression gzip on; gzip_vary on; gzip_min_length 1024; gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript; # Admin routes with granular rate limiting location ~ ^/admin { access_by_lua_block { local role_rate_limit = require "role_based_rate_limit" local method = ngx.var.request_method -- Admin write operations get strict sensitive limits if method == "POST" or method == "PUT" or method == "DELETE" or method == "PATCH" then role_rate_limit.apply_sensitive() else -- Admin read operations get more permissive admin_read limits role_rate_limit.apply_admin_read() end } proxy_pass http://api_backend; proxy_http_version 1.1; proxy_set_header Connection ""; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; proxy_connect_timeout 10s; proxy_send_timeout 60s; proxy_read_timeout 60s; } # Sensitive routes with strict rate limiting location ~ ^/(auth|reset|password) { access_by_lua_block { local role_rate_limit = require "role_based_rate_limit" role_rate_limit.apply_sensitive() } proxy_pass http://api_backend; # [standard proxy headers and timeouts] } # Write-heavy routes with strict limits location ~ ^/(bookings|batch) { access_by_lua_block { local role_rate_limit = require "role_based_rate_limit" if ngx.var.request_method ~= "GET" then role_rate_limit.apply_write_strict() else role_rate_limit.apply_read() end } proxy_pass http://api_backend; # [standard proxy headers and timeouts] } # Default API with role-based rate limiting location / { access_by_lua_block { local role_rate_limit = require "role_based_rate_limit" if ngx.var.request_method ~= "GET" then role_rate_limit.apply_write() else role_rate_limit.apply_read() end } proxy_pass http://api_backend; proxy_http_version 1.1; proxy_set_header Connection ""; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; proxy_connect_timeout 10s; proxy_send_timeout 60s; proxy_read_timeout 60s; } }
Note: The complete configuration with all location blocks is available in
mysql/goldenlist.cn.conf -
Database Production Setup
# Configure production database mysql -u root -p studyroom_booking_prod < database/create_tables_simplified.sql # Apply all migrations for migration in mysql-migrations/*.sql; do mysql -u root -p studyroom_booking_prod < "$migration" done
-
Production Build
- Set production API endpoint in
utils/config.ts - Build project in WeChat Developer Tools
- Upload for review through WeChat Developer Platform
- Set production API endpoint in
-
WeChat Configuration
- Configure server domain in WeChat MP Admin Panel
- Set up payment merchant configuration
- Configure message templates for notifications
-
Code Standards
- Follow TypeScript best practices for frontend
- Use ESLint configuration for backend
- Maintain consistent naming conventions
- Write comprehensive JSDoc comments
-
Feature Development
- Create feature branches from
main - Write tests for new functionality
- Update documentation for API changes
- Follow the existing service architecture patterns
- Create feature branches from
-
Database Changes
- Create migration scripts for schema changes
- Test migrations on sample data
- Document breaking changes
- Create detailed PR description with feature summary
- Include test coverage for new features
- Update relevant documentation
- Ensure all tests pass
- Request review from maintainers
This project is licensed under the MIT License - see the LICENSE file for details.
Built with ❤️ using WeChat Mini Program and Node.js
For questions, issues, or contributions, please refer to the comprehensive documentation in the /docs directory or open an issue on the project repository.