Authenticated Console (Sedifex Login Required)
This is the product-facing blueprint for the authenticated developer console following
an API keys first, webhooks second rollout.
Overview
- Active integration keys
- Webhook endpoint health status
- Recent integration errors
API Keys
- Create key (secret revealed one time)
- Revoke key immediately
- Rotate key safely
- Track last used timestamp
Webhooks
- Add endpoint URL
- Generate/regenerate endpoint secret
- Test delivery with signed sample event
- Inspect retries + response code history
Audit Logs
- Key create/revoke/rotate records
- Webhook secret rotation records
Team & Access
- Invite developer collaborators
- Manage role permissions by workspace/store
Operational visibility (implemented)
-
Sync status logs: dashboard table for every product sync run with
started/finished timestamps, duration, rows changed, and explicit success/failure
state.
-
Repeated failure alerts: alert policy triggers when 3 consecutive
product syncs fail for the same store within 30 minutes and routes to on-call + Slack.
-
Rollback controls: one-click rollback to last successful product
snapshot and a "freeze live catalog updates" switch if current load quality degrades.
Webhook readiness (MVP)
-
Signed events: every delivery includes
X-Sedifex-Signature using endpoint-secret HMAC SHA-256.
-
Idempotency: consumers can de-duplicate by stable
event.id and X-Sedifex-Delivery-Id.
-
Retry visibility: delivery timeline shows attempts, response codes,
next retry time, and terminal failure reason.