Certificates of authenticity

This screen is the register of the certificates of authenticity issued by the brand. You open it to issue one on a given product or on several at once, to find a certificate already issued and download its PDF, or to revoke it. Revocation is permanent.

#What the screen shows

Four counters: "Total certificates", "Active", "Revoked", "Expired". The last three come from separate requests, one per status, independent of the displayed page. A counter the screen could not obtain keeps its previous value instead of falling back to zero.

A filter bar: free search, "Status", "Issued from", "Issued before", a product selector. Then a table with six columns: "Number", "Product", "Status", "Issued by", "Date", "Actions". The badge is green for "Active", red for "Revoked", orange for "Expired". "Issued by" carries the sign-in address of the issuing account. Under the number, two blocks stack up when they exist: "Issuance notes:" in grey, then "Revocation reason:" in red.

The list paginates by 50, and the "Page X / Y" footer only appears beyond that. With no result: "No certificates", or "No certificates match these filters".

#What you can do here

Issue one at a time: choose a product, enter notes and as many "Field name" and "Value" pairs as you want, then "Issue".

Open "Issue certificates in bulk", which offers three methods. From an emission batch, the dialog loads at most 50 production batches. From a filtered search, it searches from 2 characters, 250 milliseconds after your last keystroke, in pages of 20; once 100 products are checked, the other boxes become inert. In paste mode, one identifier per line or separated by commas. Issuance by product model is not offered.

Filter, then "Reset filters". Download the PDF, addressed by the certificate number. Show the QR code, which opens the certificate page, and download it at 600 pixels. Revoke an active certificate.

#What governs access

A signed-in administrator account, otherwise the screen renders nothing. The "Certificates" sidebar entry is visible for every brand profile, and no plan is required. An administrator only sees the certificates of the brands the account has access to.

Issuance consumes the plan quota, read on the max_certificates field. In bulk, that quota is checked for the whole batch before the first certificate is created, and the identifiers sent are deduplicated.

"Issue" stays inactive with no product chosen, bulk issuance as long as the resolved list is empty or exceeds 100. "Revoke" only appears on a row whose effective status is active, and its confirmation requires the retyped number and the reason.

#What the screen refuses

Revoking with no reason: 400, code REVOCATION_REASON_REQUIRED. Without retyping the number: 400, code CONFIRMATION_REQUIRED, followed by the consequence, which counts the other active certificates left on that product. A number retyped wrong: 400, code CONFIRMATION_MISMATCH, "What you typed is not the certificate number. Nothing was changed."; the expected number is never repeated. A certificate already revoked is returned as it is.

Unknown product: 404. Product of another brand: 403. Quota exceeded: 403, code QUOTA_EXCEEDED. A non-numeric identifier in the pasted list stops everything before the call, on the message "Invalid id:" followed by the offending value. An unknown status as a filter: 422. The list is capped at 500 rows per call.