glanzlicht / MeinWeimar_APP

Official MeinWeimar App

Verified secure showcase
204 Files 2 MB Public size 14 Redacted Dart · PHP · XML · GITIGNORE · YAML · PLIST

Project overview

MeinWeimar_APP is a verified code showcase with 204 visible project entries across 2 top-level modules. The primary detected language is Dart; protected files remain visible in the structure while their contents stay private.

README

MeinWeimar — Flutter App & WordPress Plugin

> Working in Progress · Private portfolio repository · Active development

MeinWeimar is a location-based local platform for residents, students and visitors. This repository intentionally contains only two product parts:

  1. the Flutter consumer app;
  2. the meinweimar-core WordPress plugin that provides the editorial/admin
  3. layer and the REST contract consumed by the app.

The complete public website, WordPress core, databases, private infrastructure and unrelated platform modules are not part of this repository.

MeinWeimar consumer app preview

Why this project is interesting

MeinWeimar combines a mobile/web Flutter client with WordPress used as a structured content and administration backend. The goal is a maintainable product boundary: content, branding, navigation, categories, media and configuration are managed in WordPress and delivered through a versioned REST contract instead of being hardcoded in the Flutter UI.

The project demonstrates work across:

  • Flutter/Dart application architecture for iOS, Android and Web;
  • WordPress plugin architecture with custom post types, taxonomies, admin
  • settings and REST endpoints;

  • localized German/English UI and backend-controlled labels;
  • discovery/list/detail flows for places, services, events, classifieds, jobs
  • and real estate;

  • map, GPS, geocoding, marker and navigation contracts;
  • caching, ETag/config-version handling and offline-safe fallbacks;
  • role-aware account, claim, favorites, moderation and messaging boundaries;
  • automated Flutter tests, PHP/REST contract checks and release builds.

Repository structure

flutter-app/       Flutter consumer application
wordpress-plugin/  meinweimar-core WordPress plugin
screenshots/       Curated portfolio preview only

Current status

This is an active Working in Progress project. The core architecture and many end-to-end flows are implemented and continuously tested. Native device polish, production content, final legal/privacy review and further product modules are still being developed. The repository does not claim to be a finished production release.

Local development

Flutter app

cd flutter-app
flutter pub get
flutter analyze
flutter test
flutter run --dart-define=MW_API_BASE_URL=https://example.test/wp-json/meinweimar/v1

The API base URL and other environment-specific values are supplied at build or run time. No credentials are stored in the repository.

WordPress plugin

Copy wordpress-plugin into a WordPress installation's wp-content/plugins/meinweimar-core directory and activate it in the admin area. The plugin owns the MeinWeimar content types, editorial settings, permissions, REST responses, media/configuration contracts and frontend integration points.

Privacy and repository boundary

This repository is private and is prepared for controlled technical review. Secrets, production database exports, user data, WordPress uploads, private keys and infrastructure configuration must remain outside version control. The public-facing portfolio page uses a separate, redacted presentation layer and does not expose the private repository directly.

For technical reviewers

The most relevant entry points are:

  • flutter-app/lib/core — shared configuration, networking, localization,
  • theme and location contracts;

  • flutter-app/lib/features — consumer-facing product surfaces;
  • flutter-app/lib/repositories — API boundary and data access;
  • wordpress-plugin/includes — plugin services, REST, admin and contracts;
  • wordpress-plugin/assets — admin/frontend integration assets.

MeinWeimar is deliberately presented as an evolving product rather than a finished demo: the repository shows the architectural decisions, the working implementation and the remaining engineering work transparently.

wordpress-plugin/includes/class-cache.phpPHP
<?php
declare(strict_types=1);
namespace MeinWeimar;
use WP_Post;
use WP_REST_Request;
use WP_REST_Response;
final class Cache
{
public const PUBLIC_STATE_OPTION = 'mw_public_cache_state';
public static function hooks(): void
{
add_action('save_post', [self::class, 'clean_post'], 20, 3);
add_action('deleted_post', [self::class, 'clean_post_by_id'], 20);
add_action('update_option_' . Settings::OPTION, [self::class, 'clean_domain'], 20);
}
public static function clean_post(int $post_id, WP_Post $post, bool $update): void
{
if (wp_is_post_revision($post_id) || !in_array($post->post_type, array_values(ContentTypes::public_post_types()), true)) {
return;
}
self::clean_post_by_id($post_id);
}
public static function clean_post_by_id(int $post_id): void
{
if (function_exists('rocket_clean_post')) {
rocket_clean_post($post_id);
}
clean_post_cache($post_id);
self::bump_public_version();
}
public static function clean_domain(): void
{
if (function_exists('rocket_clean_domain')) {
rocket_clean_domain();
}
self::bump_public_version();
}
/**
* Return deterministic validators for an anonymous public REST response.
*
* The key contains the route, normalized query, and requested language;
* the body hash keeps the validator correct when an existing record is
* edited without changing its publication timestamp.
*
* @return array{key:string,etag:string,last_modified:string,tags:string}
*/
public static function public_metadata(string $route, WP_REST_Request $request, WP_REST_Response $response): array
{
$query = $request->get_query_params();
self::sort_recursive($query);
$identity = [
'route' => $route,
'query' => $query,
'accept_language' => sanitize_text_field((string) $request->get_header('Accept-Language')),
];
$key = 'mw:v1:public:' . hash('sha256', (string) wp_json_encode($identity));
$body = (string) wp_json_encode($response->get_data());
$state = self::state();
$etag = 'W/"' . substr(hash('sha256', $key . '|' . (string) $state['version'] . '|' . $body), 0, 32) . '"';
return [
'key' => $key,
'etag' => $etag,
'last_modified' => self::last_modified($state),
'tags' => 'public,route:' . sanitize_key(str_replace('/', ':', trim($route, '/'))),
];
}
/**
* A normal WordPress option is sufficient for a version marker; no schema
* migration or direct SQL is involved. Reads never create this option.
*/
private static function bump_public_version(): void
{
$state = self::state();
update_option(self::PUBLIC_STATE_OPTION, [
'version' => max(0, (int) $state['version']) + 1,
'changed_at' => gmdate('c'),
], false);
}
/** @return array{version:int,changed_at:string} */
private static function state(): array
{
$state = get_option(self::PUBLIC_STATE_OPTION, []);
if (!is_array($state)) {
$state = [];
}
return [
'version' => max(0, (int) ($state['version'] ?? 0)),
'changed_at' => sanitize_text_field((string) ($state['changed_at'] ?? '')),
];
}
/** @param array<mixed> $value */
private static function sort_recursive(array &$value): void
{
foreach ($value as &$child) {
if (is_array($child)) {
self::sort_recursive($child);
}
}
unset($child);
if ([] !== $value && array_keys($value) !== range(0, count($value) - 1)) {
ksort($value);
}
}
/** @param array{version:int,changed_at:string} $state */
private static function last_modified(array $state): string
{
$timestamps = [];
if ('' !== $state['changed_at']) {
$changed_at = strtotime($state['changed_at']);
if (false !== $changed_at) {
$timestamps[] = $changed_at;
}
}
$post_modified = get_lastpostmodified('gmt');
if (is_string($post_modified) && '' !== $post_modified) {
$post_timestamp = strtotime($post_modified);
if (false !== $post_timestamp) {
$timestamps[] = $post_timestamp;
}
}
$timestamp = $timestamps ? max($timestamps) : 1;
return gmdate('D, d M Y H:i:s', $timestamp) . ' GMT';
}
}

Architecture

High-level modules detected from the verified public snapshot. Protected implementation details are intentionally omitted.

flutter-appmodule
wordpress-pluginmodule

Technology stack

DartPHPJavaScriptARBLOCKPBXPROJFlutter / Dart
Dart56.1%
PHP29.4%
JavaScript4.0%
ARB2.9%
LOCK1.7%
PBXPROJ1.7%
CSS1.5%
Markdown0.4%