...
The Maestrano Hub acts as an orchestrator for the whole platform. It holds any data related to customer identification, billing and product purchase/subscription. The hub is also responsible for maintaining the Access Control Lists (ACL) for all platform users.
The hub contains customer related application logic exposed via two different APIs:
- The HUB API is used by frontend applications (see section 1) to retrieve and update customer data.
- The Developer API is used by third party applications to query data about their customer portfolio as well as submit bills for any subscription that users may have taken inside their app
The hub also acts as a Single Sign-On provider for accessing Cloud and Hosted application (= not "data only" or "connector" applications such as QuickBooks). Users coming from frontend applications and wishing to access an app are redirected to the hub wish then handle authorisation as well as single sign-on handshake with the applications.
Finally, the hub also contains an authorisation API called "IDM" (Identity Manager) that can be used by other services - such as Connec!™ - to authorise API queries. This is typically the case when users load their Impac!™ dashboard. A session token is enclosed in the query and transmitted through Impac!™ to Connec!™ which then contacts the hub to verify that the provided token (user) has access to the data. While Connec!™ is currently the only service to use the IDM, other services - such as Nex!™ for third party access to the apps - are expected to leverage the IDM in the near future.
3 - Nex!™
BLA - Overview Diagram
The diagram below show how all components interact together.