Metix System Architecture v1.0 API

sequenceDiagram autonumber actor Client as Frontend (Next.js / Mobile) participant API as Laravel REST API participant DB as MySQL Database Client->>API: POST /api/login (email, password) API->>DB: Verify User Credentials & Password Hash DB-->>API: User Found & Verified API->>DB: Generate Sanctum Bearer Token (personal_access_tokens) API-->>Client: 200 OK (token: "1|xyz...", user: {...}) Note over Client,API: Client includes "Authorization: Bearer 1|xyz..." in subsequent requests

sequenceDiagram autonumber actor Buyer as Pembeli (Frontend / App) participant API as Laravel API participant Service as CheckoutService participant Midtrans as Midtrans Gateway participant DB as Database Buyer->>API: POST /api/events/{id}/orders (ticket_type_id, quantity) API->>Service: Validate Quota & Calculate Subtotal / Discount Service->>DB: Create Order (status: "pending") & OrderItems Service->>Midtrans: Request Snap Payment Token / Snap Redirect URL Midtrans-->>Service: Return Snap Token API-->>Buyer: 200 OK (order_number, snap_token, grand_total) Buyer->>Midtrans: Pay via QRIS / Bank Transfer / Credit Card Midtrans->>API: POST /api/midtrans/webhook (order_id, transaction_status) API->>DB: Update Order status to "paid" & Generate E-Tickets (PDF & QR Token) API-->>Midtrans: 200 OK (Webhook Processed)

sequenceDiagram autonumber actor Staff as Panitia / Gate Officer participant App as Scanner App / Frontend participant API as Laravel CheckIn API participant DB as Database Staff->>App: Scan Ticket QR Code / Input Code App->>API: POST /api/checkin (qr_token / ticket_code, event_id) API->>DB: Validate Ticket Existence, Event ID, & Expiry alt Ticket Valid & Not Checked-In API->>DB: Mark Ticket status = "checked_in" & Record check_in_logs API-->>App: 200 OK (success: true, holder_name, ticket_type) else Ticket Already Used / Invalid API-->>App: 400 Bad Request (success: false, message: "Tiket sudah pernah digunakan!") end

sequenceDiagram autonumber actor Sender as Pemilik Tiket (Sender) participant API as Laravel API participant Service as TicketTransferService actor Recipient as Penerima Tiket (Recipient) participant DB as Database Sender->>API: POST /api/tickets/{id}/transfer (recipient_email) API->>Service: Send OTP Verification Code to Sender's Email Sender->>API: POST /api/tickets/transfers/{id}/verify-otp (otp_code) API->>DB: Verify OTP & Change Transfer status to "pending_acceptance" API->>Recipient: Send Claim Link Email with Token Recipient->>API: POST /api/transfers/{uuid}/sign-accept (attachment signature) API->>Service: Generate Official PDF Surat Kuasa & Re-assign Ticket Ownership API-->>Recipient: 200 OK (Ticket Ownership Transferred)