About the Company and the App
Her-Age is a curated platform for authentic vintage and pre-loved luxury. Unlike open marketplaces, Her-Age maintains selective curation and quality control at every stage.
NFTIZE is an internal Shopify app that transforms a verified item into a "digital passport" with an immutable history: from initial verification and expert appraisal to publication and subsequent transactions.
Challenge
The authentication system required modernization: inconsistencies in data had accumulated, some integration scenarios were failing, certain endpoints were outdated, and the interfaces lacked status transparency. The goal was to carefully relaunch the authentication cycle without data loss, reduce manual operations, and lay the groundwork for scalability.
What We Did
Transition to the Latest Shopify API and a New Integration Layer
- Complete replacement of deprecated calls with the latest quarterly versions of the Shopify API, prioritizing GraphQL and modern session tokens.
- Unified webhooks with versioning and idempotency: repeated events do not "break" the system state.
- Unified integration contract: clear input/output schemas, predictable error codes, and exponential retry logic.
"Digital Product Passport": NFT Certificate and Catalog Binding
- Process for issuing an NFT certificate after successful expert appraisal: the token stores key attributes and a link to verification artifacts.
- Strict binding of SKU/VariantID ↔ TokenID: searching or auditing by one identifier retrieves the complete trace.
- Support for both "manual" and batch modes: from single items to large shipments.
Data Consistency and DynamoDB
- Consistency checks for all entities: applications, product cards, media, certificates, transaction logs.
- Schema versioning, migrations with staged rollouts, and backfilling of missing relationships.
- Redesigned PK/SK and Global Secondary Indexes (GSI) to support real-world queries (by certificate number, seller, batch).
Interfaces for the Team and Partners (Next.js)
- New authentication status section: tracks, timelines, checklists, expert comments.
- Smart forms: auto-completion from brand/material catalogs, guidance on photos/angles/quality metrics.
- Improved performance (using SSR/RSC where beneficial) and accessibility (ARIA, hotkeys, protection against double submission).
Observability, Audit, and Fault Tolerance
- Audit trail for every action: who checked what and when, with supporting evidence and attached artifacts.
- Structured logging and SLA metrics for each stage (receipt → appraisal → certificate → publication).
- Queues, Dead Letter Queues (DLQ), and managed re-drive scenarios for "stuck" tasks.
Security and Compliance
- Segregation of PII and technical data; granular access policies for operators/partners.
- Storage of key material and secrets based on the "least privilege" principle.
- Procedures for certificate revocation/reissuance in case of disputes or attribute updates.
DevOps and Operations (AWS)
- Inventory and Cleanup: Implemented S3 lifecycle policies for temporary media and artifacts, log compression, and reduced CloudWatch Logs retention period.
- Service Consolidation: Consolidated services on a single server where it provides cost savings without impacting SLO; performed CPU/RAM/IO profiling.
- Deployment Safety: Implemented canary deployments, executed E2E scenarios, snapshots, and a rollback plan at every key step.
Business Outcomes
Transparent authentication with a "digital passport" builds trust in the marketplace and reduces manual routine work
Reduced errors and duplicates, predictable timelines for expert appraisal and product listing
Preparedness for scaling: from new partner integrations and token-gating scenarios to advanced analytics on product provenance