Skip to content
Module
Module 6 of 6Lesson 2 of 3~34 min

Workshop: your app with accounts, data and payments

The final workshop applies the whole course to your own app: user accounts, protected data and a Stripe test-mode payment managed on the server. You deliver the upgraded app along with a verification file that shows every piece works, ready for a developer or a partner to review.

Take this lesson: your first course is freeSee the full syllabus

Lesson objective

By the end of this workshop, you will have delivered your own app with user accounts, stored data protected by RLS and a Stripe test payment held by webhook, together with a verification file that proves each piece and that you can have reviewed.

Topics covered

  • web app workshop
  • verification file
  • Supabase and Stripe
  • AI coding agent
  • deliverable

Where it fits

Get compliant, deliver and go live

What must be settled before welcoming real users and taking real payments?

Lessons in this module

  1. GDPR and switching to live mode
  2. Workshop: your app with accounts, data and payments (this lesson)
  3. Exit kit and application plan

What you will learn in this module

This lesson is part of the course Add a database, authentication and payments to your app

  • Manage environment variables and secrets (public VITE_ variables, secret keys on the server only, .env files kept out of Git, rotation after a leak).
  • Have the agent design a data model and its migrations, then check that data is actually stored and linked to the right user.
  • Write, have written and test Row Level Security rules that guarantee each user only accesses their own data and that plan limits are enforced in the database.
  • Add sign-up, sign-in, sign-out and password reset, and verify the flows, email confirmation and redirect URLs.
  • Integrate Stripe Checkout in test mode (product, price, session created on the server, test cards) without exposing the secret key.
  • Hold payment status on the server with signed, deduplicated Stripe webhooks, tested with the Stripe CLI or the Dashboard.
  • Apply GDPR basics (information, account deletion, processors) and a go-live checklist before taking real payments.

Related courses