# From a local commerce demo to a deployed service

The included Python backend binds to localhost, stores real demo orders in SQLite and never charges money. The hosted WEBCRAFT quote endpoint validates a basket but creates no records. Neither implements identity or payment processing.

When adding a real account system, reuse the selected identity provider and verify sessions server-side. Derive owner_id from the authenticated identity, never a request field. Every order read/update must include that owner boundary. Protect session cookies with Secure, HttpOnly and the appropriate SameSite policy, and implement CSRF protection for cookie-authenticated mutations.

Reserve inventory with an expiry before handing off to a payment provider. Do not hold a database transaction while calling a remote API. Verify webhook signatures from the raw request bytes, deduplicate provider events and make the order state transition idempotent. Reconcile timed-out payment attempts before releasing stock or creating a new payment.

For shared deployment add managed rate limiting, secret storage, request tracing without personal payloads, database backups and migration rollback planning. These are integration requirements when the corresponding functionality is requested, not claims that the local starter already implements them.

Read the official integration documentation for the selected identity/payment provider; the library deliberately does not prescribe a provider or invent current pricing.