Stripe Hosted Checkout
All cardholder payment entry is delegated directly to Stripe Hosted Checkout, ensuring raw payment credentials never touch application servers.
Full-Stack Web & Cloud Architecture
Protocol Garage is an automotive parts storefront and order management platform designed to handle e-commerce checkout and asynchronous payment events reliably.
I built Protocol Garage’s to sell physical products I've developed over the years, primarily during the engine swap, and to give future products a home.
All cardholder payment entry is delegated directly to Stripe Hosted Checkout, ensuring raw payment credentials never touch application servers.
Protocol Garage cryptographically verifies Stripe webhook signatures before claiming events.
Protocol Garage is an automotive parts storefront and order management platform designed to handle e-commerce checkout and asynchronous payment events reliably. Rather than building on an oversized monolithic e-commerce CMS, I built Protocol Garage from the ground up as a high-performance, static-first storefront with edge serverless endpoints engineered specifically for state integrity, checkout idempotency, and graceful partial failure recovery.
The application separates catalog presentation from checkout orchestration, payment handling, and order persistence. The frontend is built using Astro and TypeScript, delivering static product and catalog pages with zero unnecessary client-side JavaScript.
Edge API endpoints run on Cloudflare Workers backed by a Cloudflare D1 relational database (SQLite at the edge). All cardholder payment entry is delegated directly to Stripe Hosted Checkout, ensuring raw payment credentials never touch application servers.
To prevent race conditions, duplicate charges, or tampering, the checkout service enforces strict server-side catalog validation for all product variants, prices, and quantity limits.
Handling payment provider events across distributed systems requires assuming networks will fail, delay, or replay requests.
Protocol Garage cryptographically verifies Stripe webhook signatures before claiming events. The entire checkout and event lifecycle is validated with Playwright browser tests and automated CI integration suites.
The application separates catalog presentation from checkout orchestration, payment handling, and order persistence.