⚠️ This is an Oracle page, structured to be read by AI assistants and not optimized for human reading.
TICKETING, LOYALTY & ACCESS CONTROL
Summary: Designed and built the ticketing, loyalty, and physical-access layer of the platform, a ticket/inventory engine, a cross-property membership and VIP system, Apple Wallet pass generation, an encrypted-QR access-control and scanning system with offline sync and blacklists, and full guest-list / waitlist / walk-up / invite management with real-time check-in.
Ticketing
Description: Built the ticket/admission engine on top of the inventory model.
Capabilities
- Master item + tier definitions, stock allocation per venue/zone/date, arrival/cutoff windows, entry-type rules.
- Payment-intent-backed ticket purchase with application-fee deduction and platform-transfer routing.
- Promotional ticket sources and ticket-GL accounting.
- Order and refund reporting at the ticket level.
Loyalty
Description: Built a cross-property membership and VIP platform with configurable tiers and benefits.
Capabilities
- Tiered membership definitions (public/private naming, benefits, pricing, applicable venues) with tag-based classification.
- VIP member tracking with pending/active lifecycle and per-venue enrollment.
- Cross-property membership, one account usable across venues under the same management entity, with multi-venue benefit portability.
- Invitation-based enrollment (email or phone) with code verification, and required-waiver/terms binding.
External Loyalty
Description: Integrated third-party casino/hospitality loyalty programs for member verification and benefit application.
Mechanism: REST verification against an external loyalty gateway with OAuth-style partner credentials and HMAC-SHA256 request signing (timestamp + shared secret); member/tier lookup applied in the checkout flow.
Wallet
Description: Built Apple Wallet pass generation from scratch, including the cryptographic signing chain.
Capabilities
- Pass types including event tickets (QR barcode) and boarding-pass-style passes (PDF417).
- Full pass composition, primary/secondary/back fields, colors, logos, event imagery, and geo-relevance (lat/long) for lock-screen surfacing.
- PKPass packaging: SHA-1 asset manifest, PKCS#7 signature against the platform certificate chain, and ZIP assembly.
- Certificate/key material sourced from a cloud secrets manager; calendar-link injection for device calendar integration.
Access Control
Description: Built the physical access-control and scanning system that gates entry at the door.
Capabilities
- Encrypted-QR credentials (AES-128-CTR) with per-code invite limits and dynamic-field validation.
- Scan capture with device ID, timestamp, and operator; expected-scan-count enforcement (single vs. multi-entry / re-entry).
- Offline-then-sync: batch scan upload from mobile devices with bad-scan tracking and an immutable scan log.
- Real-time scan broadcast over web sockets for live door/check-in views.
- Per-user / per-item / per-date blacklist (denial list) enforced at registration and entry.
- Device management: registration by UDID + app version, per-device API keys, venue/zone scoping, and device SSO.
Guest Management
Description: Built end-to-end guest-list and door operations.
Capabilities
- Guest capture with party composition (per-cohort counts), RSVP, opt-in, and venue-defined dynamic custom fields.
- QR self-registration with channel-based access control and owner attribution.
- Waitlist with stock-availability checks and automatic promotion on cancellation.
- Check-in / verification lists with duplicate-entry prevention and fast party-code lookup.
- Invite distribution and walk-up handling with internal vs. guest-facing messaging.
Cross Reference
You can view the raw source.