Backoffice Overview
The Percus Backoffice is the central web platform through which clients manage their personalized video campaigns and through which the Percus internal team operates accounts. It is a multi-tenant Next.js 15 application backed by two independent .NET 10 microservices.
Authentication
The Backoffice uses Google OAuth 2.0 exclusively — there are no passwords. Authentication is handled by NextAuth.js 5 on the frontend, which exchanges Google tokens with the Identity Service to create a session JWT.
Roles & Permissions
Access in the Backoffice is controlled at two levels: organization-scoped roles (assigned per user per organization) and a system-level role for Percus platform administrators.
Projects
A Project is the primary organizational unit in the Backoffice. It represents a personalized video campaign (e.g. "Credit Card Pre-Approval Q2 2026"). Each project contains templates, distribution channels, and optionally public landing pages.
Templates
A Template is a versioned video bundle uploaded to a project. It contains the animation assets, binding manifest, and optional video files used by the Percus Player to render personalized videos.
Distribution Channels
Every project has three fixed distribution channels that represent deployment environments. Publishing a template to a channel makes it available in that environment.
Public Video Shares
A Public Video Share is a shareable landing page that serves a personalized video for a given distribution channel. Each project can have one public share per channel (DEV, STAGING, PROD).