← Back to Home

rorchat.

A personal chat application for visitors to message me directly

By •

Note: I built this because I think it's hilarious to give out a link to rorchat instead of giving out my phone number, email, or LinkedIn. If you're here because I sent you this link instead of my contact info — yes, this is real, and yes, I do actually respond. It's non ironically the best way to reach me, when someone messages me I get a full page push notification on my phone - it's the only app I have that on for!

ror.chat | GitHub Repository


rorchat screenshot 1rorchat screenshot 2



What It Does


rorchat is a web-based messaging app that lets anyone start a conversation with me. It works like a personal customer support chat, but for personal use:



Tech Stack


LayerTechnology
FrontendNext.js 16 (React 18, App Router)
BackendNext.js API Routes
DatabasePostgreSQL via Supabase
AuthCustom username/password (bcrypt + hashed session tokens)
DeploymentVercel

Key Features


For Users



For Admin



Architecture


ā”Œā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”
│                         Browser                              │
ā”œā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”¤
│  / (User Chat)              │   /admin (Admin Dashboard)    │
│  - Auth modal               │   - Password-protected        │
│  - Message view             │   - Conversation list         │
│  - Image upload             │   - Reply interface           │
ā””ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”¬ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”“ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”¬ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”˜
               │                               │
               ā–¼                               ā–¼
ā”Œā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”
│                    Next.js API Routes                        │
ā”œā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”¤
│  /api/auth/*     - signup, signin, signout, me, profile     │
│  /api/chat/*     - messages, typing, reactions, upload      │
│  /api/admin/*    - login, conversations, messages, reply    │
ā””ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”¬ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”˜
                               │
                               ā–¼
ā”Œā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”
│                    PostgreSQL (Supabase)                     │
ā”œā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”¤
│  users          │  Sessions + hashed passwords              │
│  sessions       │  Hashed session tokens (30-day expiry)    │
│  conversations  │  User ↔ Admin chat threads                │
│  messages       │  Text + images + replies                  │
│  message_reactions │  Emoji reactions per message           │
│  typing_status  │  Who's currently typing                   │
ā””ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”€ā”˜

Security Model


AspectImplementation
PasswordsBcrypt hashing
SessionsRandom 256-bit tokens, SHA-256 hashed in DB
CookieshttpOnly, secure (prod), sameSite: lax
DatabaseRLS enabled, all Supabase public API access revoked
APIAll DB access through server-side API routes only

Project Structure


rorchat/
ā”œā”€ā”€ app/
│   ā”œā”€ā”€ page.tsx              # Main user chat interface
│   ā”œā”€ā”€ admin/page.tsx        # Admin dashboard
│   ā”œā”€ā”€ layout.tsx            # Root layout with fonts
│   ā”œā”€ā”€ globals.css           # All styling
│   └── api/
│       ā”œā”€ā”€ auth/*            # User auth endpoints
│       ā”œā”€ā”€ chat/*            # User messaging endpoints
│       └── admin/*           # Admin-only endpoints
ā”œā”€ā”€ lib/
│   ā”œā”€ā”€ db.ts                 # PostgreSQL connection pool
│   ā”œā”€ā”€ auth.ts               # Session management
│   ā”œā”€ā”€ imageUtils.ts         # Image processing
│   ā”œā”€ā”€ ImageCropper.tsx      # Profile pic crop tool
│   └── usePushNotifications.ts
└── public/
    └── sw.js                 # Service worker for push

Summary


rorchat is a clean, mobile-first personal messaging app. It's essentially "DMs with Rory" — visitors create an account and chat, I respond from a dashboard. Built with Next.js and Supabase, it prioritizes simplicity (no email required) and security (no direct DB access from browser).