Platforma Rezerwacji
A B2B platform for booking accommodation and catering
- Web
System available after sign-in
A closed platform where authorised employees of a large organisation order accommodation and meals themselves at venues from a catalogue. Only accounts created by an administrator have access.
- roles: employee and administrator
- 2
- required for administrative accounts
- MFA
- session token lifetime
- 10 min
The challenge
Orders placed by email are hard to settle and audit. The client required a platform with individual accounts, full accountability of actions and protections matching the OWASP Top 10 categories, including multi-factor authentication for privileged accounts.
The solution
We built an application with two roles. An employee searches for a venue, enters the number of people and meals, then places and tracks the order. An administrator manages the catalogue and accounts, and their permissions apply only after sign-in is confirmed with a code from an authenticator app. Access rules are enforced at the database level.
What we built
Venue catalogue
Filtering and sorting of offers, and a venue page with photos of rooms, bathrooms and the dining room.
Group orders
The number of participants and the types and number of meals are entered right in the search.
Invitation-only accounts
No public sign-up, and access can be revoked immediately.
MFA for the administrator
Administrative permissions require a session confirmed with a TOTP code.
Least privilege
Database access rules ensure a user sees only their own orders.
Event log
Sign-ins, permission changes, and the creation, change and cancellation of bookings are recorded.
Scope of work
Technology
- Next.js
- TypeScript
- Supabase
- PostgreSQL
Tell us about your project
Tell us what you want to build or verify. We'll come back with questions, a proposed approach and an estimate.
Free estimate · NDA on request
What happens next
- 1A short call
- 2Estimate with a schedule
- 3Work begins