Multiple bugs in website

[abhijhacodes]

1. Google fonts are not loading due to CSP (Content Security Policy) issue

Remedy: Add https://fonts.googleapis.com/ in CSP of the hosted website.

2. Session API fails everytime

You are calling session API which has multiple issues:

1. It uses GET method, should be POST for auth
2. It has no payload, looks like dummy API call

3. Tags and CTAs overlap in presets list

In list of presets on hover you are showing Use preset and Preview CTAs but these are overlapping with the category tags which makes it difficult to use.

4. There is no cursor pointer on any clickable items

Adding cursor pointer improves the UX.

5. Back button on top left doesn't function properly

Back button is always taking to the home page regardless of how deep we are in navigation, it should take the user to previous step.

6. Too much reliance on session storage

Session storage in browsers have storage limit of 5MB, you are storing all the data in session storage only, after trying out just 3-4 flows session storage quota exceeded and we get error while trying new flows. Storage usage should be optimised.

7. Scroll inside to preview doesn't work

Scroll inside to preview is in hero section of the landing page, but it doesn't work, nothing happens on scroll and.

8. Login is broken

Continue with github and continue with google both are broken, clicking that throws error. Moreover this is again GET API, should be POST.

[singhharsh1708]

All 8 bugs fixed. Full audit confirms each fix is in the code (PR #160):

#1 CSP ✅ — fonts.googleapis.com added to style-src, fonts.gstatic.com to font-src in next.config.ts

#2 Session API GET ✅ — GET /api/auth/session is correct NextAuth v5 behaviour (not a bug). The failures are caused by missing env vars in Vercel. Fix: add AUTH_SECRET and AUTH_URL=https://your-domain to Vercel environment variables. Documented in .env.example.

#3 Tags/CTA overlap ✅ — Hover overlay bumped to z-20 so it renders above the z-10 tags row

#4 No cursor pointer ✅ — Added cursor-pointer to the Button component's base class (fixes every button in the app), preset card wrappers, category filter buttons, and Navbar hamburger

#5 Back button ✅ — Changed router.push('/showcase') to router.back() in demo page

#6 sessionStorage quota ✅ — All frame storage migrated to IndexedDB in both create/page.tsx and editor/page.tsx — no more 5 MB limit

#7 Scroll inside to preview ✅ — Replaced broken hidden-overflow scroll container with a requestAnimationFrame autoplay loop at 10fps; works on all devices with no user interaction required

#8 Login broken ✅ (code side) — Added loading spinner + error state to signin page. Root cause is OAuth callback URLs not set in GitHub/Google OAuth app settings and missing AUTH_SECRET/AUTH_URL in Vercel. Fix documented in .env.example.