GTM Testing Checklist

Verify all critical areas before launching to production

Overall Progress

0 of 83 items completed

User Flows

✓ Travel partner signup → approval → dashboard access

✓ Airport retailer signup → approval → store setup

✓ Voucher generation and delivery to traveler

✓ Traveler receives email with QR code and details

✓ Retailer scans voucher and processes redemption

✓ Post-redemption receipt and confirmation emails

✓ DemoAgencyDashboard with period selector (Day/Month/Year)

✓ DemoRetailerDashboard synced with production UI/UX

Payment Processing

✓ Mollie payment integration for invoices

✓ Payment success/failure notifications

✓ Invoice generation and delivery (Postmark)

✓ Monthly invoice generation automation (generateMonthlyInvoices)

⚠ CRITICAL: Verify Mollie webhook signature validation runs AFTER auth.me()

⚠ CRITICAL: IBAN encryption needed for SignupApplication.bank_iban field

✓ Payout calculations and transfers (executeAgencyPayouts)

✓ Retailer payout emails with bank details

Security

✓ No SQL injection risk (Base44 SDK parameterizes queries)

✓ XSS protection (React escapes by default)

✓ Role-based access control (admin, user, retailer, agency)

✓ ProtectedRoute guards private pages

✓ AuthContext session management

✓ Terms accepted before signup (GDPR compliance)

⚠ CRITICAL: Bank IBAN stored unencrypted — implement field-level encryption

✓ React Hook Form validates all user inputs

✓ KVK number validation via external API

Data Integrity

✓ Voucher code uniqueness enforced

✓ Double redemption prevention (status checks)

✓ Transaction logging with full audit trail

✓ Voucher expiration date validation

✓ Discount tier logic validated (€50–€99→10%, €100–€299→15%, €300+→20%)

⚠ Missing: Explicit data retention policy for old transactions

⚠ WARNING: AdminPanel loads all data without pagination

✓ Referential integrity via Base44 entity relationships

Mobile & Responsive

✓ Mobile signup flow tested (iOS/Android)

✓ Voucher QR code display on mobile

✓ Camera permission handling (jsQR library)

✓ Touch interactions fully responsive

✓ Tablet layout tested (Tailwind CSS responsive)

✓ Landscape orientation handled

⚠ DemoRetailerDashboard: 5 charts may need pagination on small screens

✓ All 28 pages mobile-optimized

Email & Notifications

✓ Voucher generation emails via Postmark

✓ Redemption notification emails (notifyVoucherRedeemed)

✓ Invoice emails with Mollie payment links

✓ Flight reminder automation (sendFlightReminders)

✓ Email template rendering verified

✓ Unsubscribe logic in sendFlightReminders

✓ Postmark integration stable (SECRET configured)

Performance

✓ Vite + React with code splitting

✓ React Query caching (@tanstack/react-query v5.84.1)

✓ Recharts & Framer Motion lazy-loaded

⚠ QR code scanning performance: monitor with real data

⚠ AdminPanel: Add pagination for large transaction sets

✓ No N+1 queries detected (Deno functions optimized)

✓ Tailwind CSS with dynamic class prevention (safelist)

Integrations

✓ KVK validation API (validateKvk function)

✓ Postmark email service (SECRET configured)

✓ Mollie payment gateway (SECRET configured)

✓ Mollie webhook endpoint (mollieInvoiceWebhook)

⚠ MUST VERIFY: Webhook signature validation order in mollieInvoiceWebhook

✓ Third-party error handling with async/await

✓ Retry logic in all integration functions

Browser Compatibility

✓ Chrome (latest) tested

✓ Firefox (latest) tested

✓ Safari (latest) tested

✓ Edge (latest) tested

✓ Mobile browsers (Chrome, Safari)

✓ No browser-specific issues detected

Code Quality & Architecture

✓ 34 UI components (shadcn/ui) properly implemented

✓ 28 pages with clear routing (App.jsx)

✓ 12 backend functions (Deno) deployed

✓ 8 entities with proper schemas defined

✓ No dynamic Tailwind class generation

⚠ WARNING: DemoProfileTab duplicates logic with ProfileTab

⚠ WARNING: Transaction.platform_revenue calculated inconsistently

✓ React Hook Form validation on all forms

✓ Type-safe entity operations via Base44 SDK

Monitoring & Logging

✓ Base44 analytics integration (base44.analytics.track)

✓ Error handling in all functions

⚠ Missing: Error boundary components for runtime errors

✓ Automation logs in backend functions

✓ Email delivery tracking (Postmark webhooks)

⚠ TODO: Implement dedicated alerting for payment failures

CRITICAL ISSUES TO RESOLVE BEFORE PRODUCTION

🚨 IBAN encryption: Implement field-level encryption for SignupApplication.bank_iban
🚨 Webhook signature validation: Verify mollieInvoiceWebhook order (auth AFTER signature check? → WRONG ORDER)
🚨 AdminPanel pagination: Add pagination for large voucher/transaction datasets

Pre-Launch Checklist

✓ All 3 critical issues resolved
✓ Complete at least 90% of testing checklist (currently ~85%)
✓ Load test with 100+ concurrent users
✓ Staging environment fully validated
✓ Have a rollback plan documented
✓ Team trained on DutyBoost operations & support
✓ 24-hour post-launch monitoring plan

We use cookies to improve your experience. You decide which cookies to allow — essential cookies are always required for the platform to function. Cookie Policy