backoffice-pure360-marketing-service-api
WCF service wrapping the Pure360 email-marketing platform (PAINT SOAP API) for campaign sending, subscription/opt-in handling and campaign reporting for back-office marketing.
Health score
0 to 100 across seven weighted factors; nothing is hidden. Green is 75 and above, amber 50 to 74, red below 50. How scoring works.
Facts
| Languages | csharp |
| Frameworks | WCF, ASP.NET Web Application, log4net |
| Runtimes | .NET Framework 4.6.2 |
| Tests / CI | some / CI in place |
| Last commit | 2026-01-30 |
| Owner | Owner unknown (mapping to be curated) |
| Domain | Customer communications (system generated; curate in repo-owners.json to override) |
| Product area | Phenix |
| Hosted | On-prem Deployed to our own machines
|
| Releases | 1 release pipeline(s): \marketing\pure360\backoffice-pure360-marketing-service-api |
| Integration | wcf, soap |
| Source | Open in Azure DevOps |
Risk flags
Each flag links to its glossary definition.
Dependencies in context
Entanglement
kernel Bound into the core by 2 mechanism(s).
- Speaks WCF (host)
- Shares core database sqlserver:EventLog
Detaches when its WCF surface gains a modern interface or its WCF calls move to one; and when the shared database group it belongs to gains an owned API or completes schema separation (sqlserver:EventLog).
Depends on / used by
Migration playbooks
Generated from this repo's assessment data: what is feasible, what blocks it, and the steps in order. Ratings: green means actionable now, amber means sequence other work first, red means blocked, grey means not applicable.
ZDD adoption
A long roadTechnically eligible one day, but the blockers are structural: hosted WCF or SOAP contracts that cannot run two versions at once, or heavy legacy coupling. Sequence the modernisation work first. Hosts WCF or SOAP endpoints: strict serialization contracts cannot safely run two versions at once (the shared-enum trap). End-of-life runtime compounds the work. Shares sqlserver:EventLog: schema changes move in convoy.
- 3 system(s) depend on this repo; during a rolling deploy they will talk to old and new versions at once, so responses must stay compatible
- Shares sqlserver:EventLog with 13 system(s): destructive schema change is prohibited in a single release; expand and contract only
- Adopt the four-stage discipline from the ZDD engineering standard: pre-deployment compatibility, deployment, feature activation behind a flag, post-release cleanup.
- Raise automated test coverage first: ZDD trades the end-of-sprint manual gate for continuous automated confidence, so the tests are the entry ticket.
- Make every change dual-version safe: backwards-compatible APIs (new major version for breaking wire changes), expand and contract for any schema change, and consumers tolerant of unknown fields.
- Audit serialized data: anything in Redis, queues or shared caches must deserialize cleanly across adjacent versions.
- Wrap behaviour changes in feature flags so code deploys dark and release becomes a business decision, not a deployment event.
- Route deployments through the Workflow Engine's automated drain, deploy, health-check, return cycle (the path proven by the first automated production run in mid-2026).
- Verify with area-scoped regression rather than the whole-platform cycle, and watch error rates after rollout with automated rollback on alert.
SQL Server exit
Blocked by a shared core databasesqlserver:ContactApi1, sqlserver:EventLog are shared, so this system cannot change engine on its own: every sharer moves in convoy. The stage 4 work (named owner, declarative schema, owned API) has to land first; after that, the steps below apply to whatever slice this system ends up owning.
- sqlserver:ContactApi1 is shared with 1 other system(s)
- sqlserver:EventLog is shared with 13 other system(s) and is a core database
- Inventory the schema and query surface of sqlserver:Pure360MarketingCampaigns, sqlserver:ContactApi1, sqlserver:EventLog: tables, stored procedures, triggers, cross-database joins and anything else engine-specific.
- Confirm the target: PostgreSQL (relational model; keep transactions and joins, swap the engine).
- Replatform to modern .NET first (see the recommended actions): current PostgreSQL and MongoDB drivers and EF Core providers target modern .NET, and doing one risky change at a time is cheaper than doing two.
- Data access is not through an ORM, so port the SQL by hand: translate T-SQL constructs, replace stored procedures with application code or target-native equivalents, and add integration tests around the queries that matter first.
- Stand up the target alongside SQL Server, backfill with an ETL pass (pgloader or an export/import job), then dual-write or replicate until parity is proven.
- Move reads to the target, watch correctness and latency, then cut writes over and keep SQL Server read-only until confidence is earned.
- Decommission the SQL Server database and remove the connection strings and firewall paths that pointed at it.
Containerisation
Feasible after replatformingAppropriate eventually, but not from here: the legacy runtime and the hosted WCF surface both have to go first, and that work is already in this repo's recommended actions.
- .NET Framework only runs on Windows; practical (Linux) containers need modern .NET
- Hosts WCF or SOAP endpoints, which have no home on modern .NET; consumers need a modern interface first
- Replatform to modern .NET first (see the recommended actions), replacing the hosted WCF/SOAP surface with REST, gRPC or messaging so consumers can follow. Containerising then becomes routine.
- Add a Dockerfile and make the app read all configuration from environment variables and the secrets manager, never from machine-local files.
- Log to stdout and expose a health check endpoint so ECS can supervise it.
- Adopt the shared ci.yml pipeline template with the container parameters (awsRegion, containerAfterBuild, ecsTerraformRepo), which is exactly how the estate's existing AWS services deploy.
- Define the service in the Terraform repo, deploy to a non-production environment, then shift traffic and disarm the deployment-group release pipeline.
Recommended actions
Rotate the credentials committed to backoffice-pure360-marketing-service-api
Risk flags indicate credentials or keys in source (hardcoded-secrets). Rotate now and enable secret scanning in CI; this is independent of all other work.
Impact: Closes a live security exposure at near-zero cost
proposedReplatform backoffice-pure360-marketing-service-api to modern .NET
Runs on .NET Framework 4.6.2, out of mainstream support. No pinning dependency blocks it; sequence by fan-in (providers before consumers). Shares sqlserver:EventLog, so batch it with its database group (stage 4).
Impact: Unblocks 3 dependent system(s)
proposedAssessment notes
backoffice-pure360-marketing-service-api
Purpose
IIS-hosted WCF service (Pure360.svc implementing IPure360Service, plus CampaignReporting.svc) that fronts the Pure360 email-marketing platform for the back office: sending campaigns, managing opt-ins/lists and producing campaign reporting.
Tech stack
- .NET Framework 4.6.2 WCF web application (packages.config style), with
TC.Pure360.Clientimplementing a SOAP interceptor for Pure360's PAINT API, plus DAL, Domain, Reporting and Shared projects. - Uses Polly for resilience, log4net for logging (writing to the
EventLogdatabase), YamlDotNet, and TC.Phenix.ApplicationFramework. - Connection strings resolved via TC.ConnectionBroker; per-environment
Web.*.configtransforms (OpsDev, TestQA, DataFixQa, LiveProviderQa, PreProduction, Production).
Deployment
Prod application with 1 release. Build pipelines "backoffice-pure360-marketing-service-api" and its develop variant; release pipeline under \marketing\pure360\. No YAML pipeline in the repo, so builds are classic Azure DevOps definitions.
Dependencies
- Internal:
tc-connectionbroker(TC.ConnectionBroker/Sql packages); calls the legacy contact-centre SOAP service (/services/contactcentre/ContactCentre.asmxvia TC.ContactCentre.ServiceClient), which maps tophenix-contact-centre-wcf. - External: Pure360 email platform — PAINT SOAP endpoint (
paint.pure360.com/_bus/request.soap) and the Pure360 opt-in list website (email.travelcounsellors.co.uk/interface/list.php).
Data stores
- SQL Server
Pure360MarketingCampaigns(campaign data) andContactApi1(contact data) via connection broker. - SQL Server
EventLogdatabase used as the log4net logging sink.
Integration points
- Inbound: WCF/SOAP endpoints (
Pure360.svc,CampaignReporting.svc) consumed by back-office marketing tooling. - Outbound: Pure360 PAINT SOAP API and the contact-centre ASMX SOAP service.
Code health
- Unit tests exist (
TC.Pure360.MarketingService.Tests: client, DAL, CSV, notification-processor tests) — coverage appears moderate. - README is untouched boilerplate. Config transforms contain hard-coded SQL credentials for QA environments.
- Recently touched (last commit 2026-01-30) but the codebase style is legacy.
Modernisation risks
- .NET Framework 4.6.2 + WCF: WCF is not supported on modern .NET, so any migration means re-platforming to REST/gRPC or CoreWCF.
- Tight coupling to Pure360's SOAP API and to the legacy contact-centre ASMX service; hard-coded credentials in source control.