StreamCrea — Creator dashboard

1. 1

   Connecting a network

   The creator connects an account through OAuth; the requested scopes depend on the network, and the account is stored.

2. 2

   Drafting

   The post is created in a transaction that checks the plan and that every targeted account belongs to the creator.

3. 3

   Scheduling

   Every minute, a command queues a publishing job for each post whose time has come.

4. 4

   Publishing

   For each account, the registry calls the network’s class; HTTP calls have a 30 s timeout and two retries.

5. 5

   Tracking

   Status, external ID or error are written network by network; the post becomes “published” or “failed”.

6. 6

   Tokens

   Every day, a job renews Google, Twitch and X tokens that expire within 24 hours.

The main entities, their key fields and their relations.

Languages

PHP 8.4, JavaScript, TypeScript (Playwright)

Framework

Laravel 12

Front end

Blade, Livewire 3, Vite 6, Tailwind 3, Flowbite

Admin

Orchid 14, 23 screens

Database

MySQL 8 in development and production, SQLite in CI

Queues and scheduler

Scheduled publishing every minute, hourly sync, daily token renewal

Authentication

Laravel UI, Socialite (Google, Twitch, Kick, YouTube…), Sanctum

Payments

Stripe Checkout, Cashier 16, Free, Perso, Streamer and Enterprise plans

Platform APIs

Twitch Helix, YouTube Data v3, Kick; Meta Graph v19, X API v2, LinkedIn, Discord webhooks

Hosting

Dedicated Apache and MySQL server, SSH deployment followed by an HTTP check

CI/CD

5 GitHub Actions workflows on a self-hosted runner: CI, staging, production, release, Discord

Tests

PHPUnit 11 (154 tests), Playwright (8 specs, 50 tests), route × role matrix

Quality

Pint in CI, Composer and npm audits, Gitleaks

Observability

Sentry, PostHog after consent, Discord alerts, Resend

Languages (UI)

French, English, Spanish, Dutch

Security

spatie/laravel-permission team roles, HSTS and Permissions-Policy headers, rate limiting on OAuth and contact, honeypot

• Publishing hub

  Facebook, Instagram (create then publish), X, LinkedIn and Discord, immediate or scheduled.

• Sync

  YouTube, Twitch and Kick statistics collected every hour.

• OAuth sign-in

  Sign up and sign in with Google, Twitch, Kick or YouTube.

• Plans

  Four tiers, with limits checked on every action.

• Creator blog

  Public posts or posts reserved for paid plans.

• Fan subscriptions

  A subscriber supports a creator through Stripe.

1. Roles not working in production

   ProblemPermissions run in team mode, but nothing set the active team: every role check returned false.

   FixA middleware sets the team on every request.

2. Admin out of service

   ProblemAll 25 admin routes returned a 500 error, for five stacked causes.

   FixCauses fixed one by one; the CI matrix now covers the admin.

3. Plan granted without a verified payment

   ProblemComing back from Stripe was enough to switch plans.

   FixThe Stripe session is read back and its owner and paid status checked, covered by 15 tests.

4. Unlimited plans blocked

   ProblemThe ?? 0 operator confused “unlimited” (null) with “missing”.

   Fixarray_key_exists, with a comment explaining why.

5. Destructive actions over GET

   ProblemA simple image tag could trigger a deletion (CSRF).

   FixMoved to POST and DELETE, and a package that exposed unauthenticated routes was removed.

1. August 2023 First commit, YouTube and Twitch APIs
2. December 2023 Twitch and YouTube live detection
3. June 2024 Laravel 11, Stripe and Cashier
4. October 2025 StreamOne becomes StreamCrea
5. June 2026 Publishing hub, plans and blogs
6. September 2026 Route audit, roles and admin fixed

529

commits

10

account platforms

7

roles tested on every route

4

languages

Taken from the project’s source code and Git history on 8 October 2026. No usage or revenue figures are published.