FurioZOs
Official website and store for UERJ West Zone's athletics club
About the project
Official website of Atlética FurioZOs, the student athletics club at UERJ West Zone: its history, board and the official store for custom jerseys.
The front end is static and hosted on Firebase. Sign-up and sign-in use Firebase Authentication with email verification, and orders live in Firestore, guarded by access rules.
Payments go through Mercado Pago, but credentials never reach the browser: a Cloudflare Worker talks to the payment API and validates every order before charging.
Technical highlights
- 01 Pix payments with Mercado Pago, brokered by a Cloudflare Worker
- 02 Checkout only for accounts with a verified email
- 03 Edge rate limiting on Cloudflare against checkout abuse
- 04 Strict Content Security Policy and security headers on hosting
- 05 LGPD (Brazil's GDPR) compliance: national ID numbers are not stored on student profiles