Glossary

Term	Meaning
Trident	Internal name of the Guest Activation Platform.
Guest	Anyone visiting FINNS. A guest who has signed in is also a member.
Member / customer	A guest with a FINNS account. Core calls them customers; the product calls them members. Every signed-in guest is a member.
Core	The backend of the Trident platform: a single Quarkus project (core) that contains the API. It owns membership, the points ledger, one-time codes and check-ins.
Guest app	The FINNS app on iOS, Android and the web.
Engagement partner	The vendor running rewards, raffles and the in-app widgets: Sota Platforms. It posts points through core’s Points API.
Widget	A piece of the engagement partner’s UI shown inside the guest app, in a web view (mobile) or an iframe (web).
Slot	A place in the app where widgets are shown, such as home.
Booking engine	The website where guests book beds, cabanas and packages, and pay for them.
Gate	A scanner at an entrance that checks a member in by reading the QR in the app.
Check-in	A gate scan. Granted or denied; a granted check-in earns points.
Handoff	Moving a signed-in guest from the app to the booking website with a one-time code.
Widget launch	Starting a widget session for a signed-in guest with a one-time code.
One-time code	A random, 60-second, single-use secret that core issues to the app for one partner and that partner redeems server to server.
Subject (sub)	The guest’s permanent internal id in Keycloak. Not shared with partners, except the booking engine, which signs in with Keycloak itself.
FINNS ID	The member’s Keycloak username, shown to the guest, who can sign in with it instead of their email. It can change, so it is never used as a key.
External id	Core’s opaque UUID for a member (extId), given to partners instead of the Keycloak subject or FINNS ID. The only id a partner sees, and never used by the internal apps (admin, app, core), which use the subject.
Session id (sid)	The id of one Keycloak sign-in session, used to sign that session out.
Posting	One movement of points: a credit, a debit or a refund.
Ledger	Core’s double-entry, append-only record of every posting.
Idempotency key	A caller-chosen value that makes a retried posting replay instead of posting twice.
Revoke	The callback core sends a partner when a guest signs out.
Business date	A calendar day in Bali time (Asia/Makassar), used for reconciliation.
IDR	Indonesian rupiah.