The hardest problem
A QR code on a wall is trivially photographed and shared. Attendance has to prove presence, not possession of an image.
What I did about it
01
The QR payload is bound to a geofence, so a scan from outside the office is rejected regardless of how the code was obtained.
What I rejected, and why
Listed with the honest caveat: I authored 4 of 25 commits here. I was a contributor on this one, not the lead — a colleague wrote most of it.
What I’d change
I authored 4 of 25 commits, so my read on the codebase is partial. If I picked it up properly I would start by pinning the attendance geofence logic with tests, since that is the part where a bug quietly costs someone their pay.
Built with
Next.js 15ExpressMongoDBMongooseReduxTailwind 3