backoffice-pushnotifications-api
REST API and contract library that registers customer devices and sends push notifications (bookings, quotes, flight alerts, documents) to the myTC app via Firebase Cloud Messaging.
Health score
0 to 100 across seven weighted factors; nothing is hidden. Green is 75 and above, amber 50 to 74, red below 50. How scoring works.
Facts
| Languages | csharp |
| Frameworks | ASP.NET Core 8 |
| Runtimes | .NET 8 |
| Tests / CI | some / CI in place |
| Last commit | 2026-07-07 |
| Owner | Owner unknown (mapping to be curated) |
| Domain | Customer communications (system generated; curate in repo-owners.json to override) |
| Product area | Phenix |
| Hosted | On-prem Deployed to our own machines
|
| Releases | 1 release pipeline(s): \ops\pushnotificationsapi\backoffice-pushnotifications-api CI |
| Integration | rest |
| Source | Open in Azure DevOps |
Dependencies in context
Entanglement
loose No binding mechanisms apply: this system needs no untangling work.
Depends on / used by
Migration playbooks
Generated from this repo's assessment data: what is feasible, what blocks it, and the steps in order. Ratings: green means actionable now, amber means sequence other work first, red means blocked, grey means not applicable.
ZDD adoption
Ready with guardrailsClose: the deployment path exists, but specific checks are needed first, typically raising tests, auditing serialized data, or respecting a shared schema with expand and contract. Test coverage is thin; ZDD shifts the safety net onto automation.
- 1 system(s) depend on this repo; during a rolling deploy they will talk to old and new versions at once, so responses must stay compatible
- Adopt the four-stage discipline from the ZDD engineering standard: pre-deployment compatibility, deployment, feature activation behind a flag, post-release cleanup.
- Raise automated test coverage first: ZDD trades the end-of-sprint manual gate for continuous automated confidence, so the tests are the entry ticket.
- Make every change dual-version safe: backwards-compatible APIs (new major version for breaking wire changes), expand and contract for any schema change, and consumers tolerant of unknown fields.
- Audit serialized data: anything in Redis, queues or shared caches must deserialize cleanly across adjacent versions.
- Wrap behaviour changes in feature flags so code deploys dark and release becomes a business decision, not a deployment event.
- Route deployments through the Workflow Engine's automated drain, deploy, health-check, return cycle (the path proven by the first automated production run in mid-2026).
- Verify with area-scoped regression rather than the whole-platform cycle, and watch error rates after rollout with automated rollback on alert.
SQL Server exit
Not applicableNo SQL Server dependency is recorded for this repo. Nothing to migrate.
Containerisation
Ready to containeriseModern runtime, no hosted legacy transport: this service can follow the estate's proven container path (Dockerfile, shared pipeline template, ECS via Terraform).
- Add a Dockerfile and make the app read all configuration from environment variables and the secrets manager, never from machine-local files.
- Log to stdout and expose a health check endpoint so ECS can supervise it.
- Adopt the shared ci.yml pipeline template with the container parameters (awsRegion, containerAfterBuild, ecsTerraformRepo), which is exactly how the estate's existing AWS services deploy.
- Define the service in the Terraform repo, deploy to a non-production environment, then shift traffic and disarm the deployment-group release pipeline.
Recommended actions
Rotate the credentials committed to backoffice-pushnotifications-api
Risk flags indicate credentials or keys in source (secrets-in-source). Rotate now and enable secret scanning in CI; this is independent of all other work.
Impact: Closes a live security exposure at near-zero cost
proposedAssessment notes
backoffice-pushnotifications-api
Purpose
Handles all push-notification concerns for the myTC customer app: device registration/deregistration, per-device notification settings and language, and sending booking, quote, flight-alert and document notifications. Also exposes a NuGet contract package (TC.PushNotifications.Contract) consumed by callers.
Tech stack
Three C# projects: TC.PushNotifications.API (ASP.NET Core, net8.0), TC.PushNotifications.Contract and TC.PushNotifications.Domain (both net8.0). Uses Swashbuckle (Swagger), Serilog + TC.OpenTelemetry, TC.ConnectionBroker for Mongo connectivity, FirebaseAdmin SDK, MongoDB.Driver 3.x and StackExchange.Redis.
Deployment
Actively deployed (prod_application, 1 release). Build pipeline backoffice-pushnotifications-api (YAML using shared azure-pipelines-templates), release pipeline \ops\pushnotificationsapi\backoffice-pushnotifications-api CI. CI publishes the Contract NuGet package and the API app.
Dependencies
Internal: consumes shared TC NuGet packages (ConnectionBroker, OpenTelemetry, Correlation, Exceptions) rather than calling other estate services directly; no confident repo-level dependencies identified. External: Google Firebase Cloud Messaging (FCM) is the sole third-party provider.
Data stores
MongoDB database PushNotifications (device tokens, customer notifications, with index scripts via TC.ScriptRunner.Mongo). Redis (Azure Cache) used as an alternative/legacy repository implementation behind a proxy pattern.
Integration points
Inbound REST API (health + push-notification endpoints, Swagger-documented). Outbound HTTPS to Firebase FCM. No message-bus usage found.
Code health
TC.PushNotifications.Domain.Tests covers managers, providers and repositories including a MongoDB fixture. YAML CI in place. Last commit 2026-07-07 — actively maintained.
Modernisation risks
Low risk: modern .NET 8 with current libraries. Main concern is plaintext Redis passwords and Firebase API keys committed in appsettings*.json (secrets-in-source); the legacy FCM HTTP API key usage may also need migrating to the FCM v1 API.