B2Bitcoin / beBOP

Marvelous p2p bitcoin-based online sales platform
https://be-bop.io
GNU Affero General Public License v3.0
18 stars 3 forks source link

šŸ‘Øā€šŸ”¬ Add an age limitation on website first access #1465

Closed Tirodem closed 4 weeks ago

Tirodem commented 1 month ago

For various law compliance reasons, we need to allow a be-BOP owner to display a mandatory age filter on his / her website, while :

Usually, age and age consent is another cookie, but I don't want to add more, for be-BOP native philosophy.

So I'll made proposition but it's open to suggestions.

1st thing : admin setting

image image

2nd thing : /home page substitution

While age is not confirmed, whatever link is clicked on the website (even social network), display this page : image I did the test with agewalll, that can be a specific CMS page. Either we sent every link to this page as long it's not accepted, or we disable every link. This is, once the age is valitaded, if the user landed from a link to /tartiflette page, after validating the form, the user must land on /tartiflette page (or be locked on this form page forever).

3rd thing : cookie management

I'd like to not add another cookie. @coyotte508 is it possible to overload the bootik-session cookie with this consent or do we need another cookie, like for lang ?

4th : confirmation on product addition

Admin : image Product page : image Test from # 1 will be displayed again. Message can be related, or not, depending of https://github.com/B2Bitcoin/beBOP/issues/1187 implementation.

coyotte508 commented 1 month ago

IMO a separate cookie is the easiest way

coyotte508 commented 1 month ago

We can add this screen directly in +layout.svelte (no redirect)

Tirodem commented 1 month ago

@coyotte508 if we introduce a third cookie, don't you think it's time to develop the RGPD alerting ?

coyotte508 commented 1 month ago

no need it's only needed for tracking/analytics cookie.

Theses cookies are "essential" cookies