Signal Distribution Platform

1. System Overview

Main Components

2. User Roles & Permissions

Admin (Full Access)

Dashboard Access:

• View all customers (purchased & not_purchased)
• Filter by: purchase_status, account_status, subscription_status
• View full email & phone numbers
• Revenue reports (weekly/monthly)
• System metrics

Client Management:

• Add/Edit/Delete customers
• Verify new customers manually
• Override auto-renewal
• Bulk renewal for multiple customers
• View complete purchase history

Credentials:

• Unlimited personal credentials
• Can create test signals for development
• View all client credentials

Support (Limited Access)

Dashboard Access:

• View assigned customers only
• Filter by status
• View masked email & phone (abc***123@•••.com)
• Search all customer data

Client Management:

• Create new customer on HighLevel → Refresh → Verify
• Edit customer info (name, notes)
• Update subscription status
• Cannot delete customers

Credentials:

• Max 20 credentials personal
• For real trading/testing (not fake test)
• Completely separate from client credentials

Client (Self-Service)

Dashboard Access:

• View own subscription status
• View purchased products
• View signal history

Credentials:

• Max 5 licenses MT4/MT5
• Add/remove licenses self-service
• View API keys & Webhook URLs (with re-authentication)
• Copy webhook URL for TradingView setup

Products:

• View purchased products
• View expiry dates
• View auto-renewal status
• Cannot purchase in portal (redirect to sales page)

3. Status System

3.1. Purchase Status

3.2. Account Status

3.3. Subscription Status

4. Client Registration Flows

4.1. Flow 1: Self-Registration (No Support approval)

Key Points:

• No Support approval - fully automated
• Client completes setup independently
• OTP expires after 10 minutes
• Password requirements: min 8 chars, 1 uppercase, 1 number, 1 special char

4.2. Flow 2: Support Creates Customer (Manual)

Key Points:

• Support creates on HighLevel first
• Refresh data to sync to system
• Support clicks "Send Verify Link" - system sends email automatically
• Client receives email and completes verification + password setup
• High security - Support never knows client's password

5. Admin Features

5.1. Dashboard with Filters

5.2. Product Management

Main Functions:

• Sync product list from HighLevel
• View all products
• Enable/disable auto-renewal per product
• View number of active customers
• Display price from HighLevel (read-only)

5.3. Bulk Renewal

Bulk Renewal Process:

Main Features:

Use Cases:

• Combo Promotion: 50 customers buy 3-month combo → renew all 90 days at once
• Monthly Bonus: Give extra 7 days to all active customers
• Issue Compensation: Server down 2 days → Add 2 days to affected group
• Enterprise: Company buys 20 licenses → Renew all at once

5.4. Revenue Reports

5.5. Layout Customization

Available Widgets:

• Subscription Status Card
• Signals Today Counter
• License Usage Gauge
• Quick Actions Panel
• Recent Signals Table
• Product Expiry Alert

6. Support Features

6.1. Dashboard with Masked Data

6.2. Customer Verification Process

6.3. Personal Credentials (20 max)

• Support can create up to 20 credentials of their own
• Used for real trading or system testing
• Completely separate from client credentials
• Does not affect customer quota

7. Client Portal Features

7.1. Dashboard Overview

7.2. Products Tab

Active Products:

Expired Products:

8. Credentials Management

8.1. Quota Per Role

8.2. Client Add License Flow

8.3. API Key View Security

Security Flow:

1. Client clicks "View API Key"
2. System requires: Enter password OR Enter OTP from email
3. If correct: Display full API key for 30 seconds
4. After 30 seconds: Auto-hide again
5. Log: IP, time, action in audit trail

9. Purchase History

9.1. Access

• Admin: View all purchase history
• Support: View history of assigned customers
• Client: No access (redirect to sales page to view invoices)

9.2. Data Source

9.3. Display Columns

9.4. Filters

• Date range
• Product
• Price range
• Customer name
• Order status

9.5. Data Export

10. Product Management

10.1. Sync from HighLevel

10.2. Product Information

10.3. Auto-Renewal Configuration

Parameters:

• Enable/Disable: Toggle ON/OFF
• Renewal days: 30, 60, or 90 days
• Email notification: Yes/No
• Condition: Only renew when payment_status = paid on HighLevel

11. Revenue Reports

11.1. Total Revenue

11.2. Customers

11.3. Revenue by Product

11.4. Charts

• Line Chart: Revenue trend over last 30 days
• Bar Chart: New customers per week
• Pie Chart: Revenue distribution by product

12. Layout Customization

12.1. Client Dashboard Customization

Available Widgets:

Actions:

• Drag & Drop: Move widgets to desired position
• Resize: Drag corner to resize widget
• Show/Hide: Toggle visibility for each widget
• Reorder: Drag to rearrange widgets

12.2. Support Workspace Customization

Customer Table Configuration:

Default Filters:

• Show active customers first
• Hide expired > 90 days
• Sort by expiry date (nearest first)

13. Database Schema

13.1. Main Tables

-- USERS & AUTHENTICATION
users (Admin/Support)
├── id, email, password_hash, role (admin/support)

client_users (Client accounts)
├── id, customer_id, email, password_hash
├── account_status (new/verified/active/expired)

-- CUSTOMERS
customers
├── id, name, email, phone
├── purchase_status (purchased/not_purchased)
├── subscription_status (active/trial/cancelled/expired)
├── subscription_start, subscription_end
├── highlevel_id

-- PRODUCTS
products
├── id, name, highlevel_product_id, price
├── auto_renewal_enabled, auto_renewal_days

customer_products (Many-to-many relationship)
├── customer_id, product_id
├── purchase_date, expiry_date, auto_renewal

-- PURCHASE HISTORY
purchase_history
├── customer_id, product_name, amount
├── purchase_date, highlevel_order_id, status

-- CREDENTIALS
client_licenses (Max 5 per client)
├── customer_id, platform (MT4/MT5), account_id
├── api_key_hash, webhook_url, is_active

support_credentials (Max 20 per support)
├── support_user_id, platform, account_id
├── api_key_hash, webhook_url, is_active

admin_credentials (Unlimited)
├── admin_user_id, platform, account_id
├── api_key_hash, webhook_url, is_active

-- SIGNALS
signals
├── symbol, action, entry_price, stop_loss
├── take_profit_1, take_profit_2, take_profit_3

signal_deliveries
├── signal_id, customer_id, license_id
├── delivered_at, status (delivered/failed/pending)

-- SECURITY
otp_codes
├── email, code_hash, purpose
├── expires_at, attempts, used

-- LAYOUT CUSTOMIZATION
layout_settings
├── role, view_name, config (JSON)
├── created_by, is_active

-- AUDIT LOGS
audit_logs
├── user_id, user_type, action
├── resource_type, ip_address, created_at

13.2. Important Indexes

• idx_customers_email - Fast search by email
• idx_customers_purchase_status - Filter by purchase status
• idx_client_licenses_api_key_hash - Fast API key authentication
• idx_signals_sent_at - Filter signals by time
• idx_purchase_history_date - Revenue reports by date

14. Workflow Diagrams

14.1. Auto-Renewal Workflow

14.2. Signal Distribution Workflow

15. Security Features

15.1. Password Requirements

• Minimum 8 characters
• At least 1 uppercase letter (A-Z)
• At least 1 lowercase letter (a-z)
• At least 1 number (0-9)
• At least 1 special character (!@#$%^&*)
• Cannot be same as email
• Cannot be common password

15.2. OTP System

15.3. API Key Security

• Generation: 32-byte random string (secrets.token_urlsafe)
• Storage: SHA-256 hash only (never store plain key)
• Transmission: HTTPS only
• Rotation: Admin can regenerate keys
• Revocation: Instant (mark as deleted)

15.4. Session Security

15.5. Rate Limiting

16. API Endpoints

16.1. Public Endpoints (No authentication)

POST /api/v1/webhook
    - Receive alerts from TradingView
    - Header: X-Webhook-Signature (HMAC validation)

POST /api/v1/verify/email
    - Send email to get OTP
    - Rate limit: 5/hour

POST /api/v1/verify/otp
    - Verify OTP code
    - Rate limit: 3 attempts

POST /api/v1/verify/password
    - Set password after OTP verification

16.2. Client Endpoints (JWT authentication)

GET /api/v1/signal/{api_key}
    - EA polls for signals
    - Rate limit: 10/second
    - Return: JSON signal or {}

GET /api/v1/client/dashboard
GET /api/v1/client/products
GET /api/v1/client/licenses
POST /api/v1/client/licenses
DELETE /api/v1/client/licenses/{id}
GET /api/v1/client/signals/history
GET /api/v1/client/settings
PUT /api/v1/client/settings

16.3. Support Endpoints (JWT + Role check)

GET /api/v1/support/customers
    - Email & phone masked
    - Assigned customers only

GET /api/v1/support/customers/{id}
PUT /api/v1/support/customers/{id}
POST /api/v1/support/customers/sync
POST /api/v1/support/customers/{id}/verify
GET /api/v1/support/credentials
POST /api/v1/support/credentials
DELETE /api/v1/support/credentials/{id}
GET /api/v1/support/purchase-history

16.4. Admin Endpoints (JWT + Admin role)

GET /api/v1/admin/customers
    - Full email & phone visibility
    - All customers

GET /api/v1/admin/customers/{id}
POST /api/v1/admin/customers
PUT /api/v1/admin/customers/{id}
DELETE /api/v1/admin/customers/{id}

GET /api/v1/admin/products
POST /api/v1/admin/products/sync
PUT /api/v1/admin/products/{id}

GET /api/v1/admin/reports/revenue
GET /api/v1/admin/reports/customers
GET /api/v1/admin/purchase-history

GET /api/v1/admin/layouts
PUT /api/v1/admin/layouts/{role}

GET /api/v1/admin/credentials
POST /api/v1/admin/credentials

POST /api/v1/admin/bulk-renew
    - Bulk renewal
    - Body: {
        "customer_ids": [1, 2, 3, ...],
        "product_id": 5,
        "days": 30,
        "reason": "Combo promotion Q1",
        "send_email": true
      }
    - Return: {
        "success": 45,
        "failed": 2,
        "total": 47,
        "details": [...]
      }