Bookings

Online bookings

Everything taken through book.html on the staging site. Read straight from the una-bookings D1 database through /api/admin/bookings, which needs the admin token. Amounts are rupees. Deposit is 50% of the GST-inclusive total; the balance is collected at the dive centre.

Admin token

The token is the ADMIN_TOKEN Pages secret. On this Mac it is in the Keychain: security find-generic-password -s una-dashboard-admin-token -w. It is kept in this tab's sessionStorage only, so closing the tab forgets it.

Bookings hold customers' names, phone numbers and email addresses. This page is served from the dashboard root, so on una.donarundas.com it sits behind Cloudflare Access — but the same content is also reachable at una-dashboard.pages.dev, which is not. The token is the only thing protecting it there.
Internal. Live data from D1, not sample data. Nothing on this page is written back; to change a booking, change it in the database.