DIN 0815/S · PS-05
Integration Hub
Centralized third-party integrations — encrypted connections, a REST/GraphQL proxy, and verified webhooks.
The connection and translation layer to outside systems. Credentials are stored encrypted at rest (AES-256-GCM) and never returned; a config-as-code provider registry declares each vendor’s base URL, auth type and webhook signature scheme. A generic proxy issues REST or GraphQL calls through a connection, injecting the right auth header, and inbound webhooks are verified per provider before being recorded.
Responsibilities
- Connections with credentials encrypted at rest, redacted on read
- Provider registry (Google, Microsoft, Stripe, GitHub, Shopify, REST, GraphQL)
- Generic REST + GraphQL proxy with injected provider auth
- Inbound webhook signature verification per provider
- OAuth connect and sync jobs as documented seams
API surface
- GET /api/providers
- GET/POST /api/connections · DELETE /api/connections/:id
- POST /api/connections/:id/proxy · /graphql
- POST /api/webhooks/:provider
- GET /api/webhook-events · GET /api/sync-jobs
CONSUMED BY Any module that talks to a third-party SaaS or external API. A Platform Service never depends on a Business Module.