Initial: Splynx API integration, portal architecture, inventory snapshot

2026-07-25 15:16:08 -04:00
commit 1f3d55d89f
2 changed files with 161 additions and 0 deletions
@@ -0,0 +1,47 @@
+# CHANGELOG — Forefront Wireless Customer Portal
+
+---
+
+## 2026-07-25 — Project Inception & API Connection
+
+**Context:** Germaine shared Splynx API credentials for Forefront Wireless, his WISP company. The self-hosted Splynx instance (v4.2) runs at `portal.forefrontwireless.com/admin/`. The goal is to build a branded customer portal at `my.forefrontwireless.com`.
+
+### Completed
+
+- **API connection established** — Splynx API v2.0 at `/api/2.0/` verified working
+- **Authentication cracked** — Signature-based auth (HMAC-SHA256) with microtime nonce. Three methods tested:
+  - ✅ Signature: `Splynx-EA (key=K&nonce=N&signature=S)` — works
+  - ✅ Access Token: POST `/admin/auth/tokens` — generates token with 30-min expiry
+  - ⚠️ Basic Auth: returns 403 unless "Unsecure access" is enabled on the API key
+- **API key configured** — Full permissions on all resources (customers, services, finance, networking, support, tariffs, scheduling, inventory)
+- **Endpoint reconnaissance** — Verified working:
+  - `GET /admin/customers/customer` — 43 customers (33 active, 9 disabled)
+  - `GET /admin/customers/customer-internet-services/{id}` — per-customer services
+  - `GET /admin/networking/routers` — 5 MikroTik CCR2004 routers
+  - `GET /admin/tariffs/internet` — 9 plans ($59.95-$299.95/mo)
+  - `GET /admin/finance/invoices` — billing records
+- **Splynx quirks documented** — 405 on query-param service endpoints, tariff name resolution, signature nonce format
+
+### Decisions
+
+- **Stack:** React SPA → FastAPI backend → Splynx API v2.0. Same pattern as IntelSight and VoIPSimplicity.
+- **Hosting:** CloudPanel on app3 (152.53.241.111) — keeps customer portals together
+- **Auth pattern:** Server-to-server signature auth (not per-user Access Tokens) — portal handles its own user auth, backend proxies to Splynx
+- **Domain:** my.forefrontwireless.com (follows ITPP product convention: my.*.com)
+- **Building after:** IntelSight + LaunchCheck (shared infrastructure, shared auth patterns, reusable Super Search engine)
+
+### Reference: API Credentials
+
+```
+Key:    5a8dc490716424f435306f2c18b4fdcb
+Secret: 5773f779e5ae5aac965845a66bd857a0
+Base:   https://portal.forefrontwireless.com/api/2.0/
+```
+
+### Next Steps (When Ready)
+
+1. Register `my.forefrontwireless.com` DNS
+2. Build FastAPI backend with Splynx proxy layer
+3. Build React dashboard
+4. Stripe integration for payments
+5. Deploy on app3 via CloudPanel