Amol Loya
03/15/2024, 4:26 PMAnthony OConnor
03/15/2024, 4:52 PM<https://accountnum.netsute.com/etc/etc/etc?customrecordid=1>
you'd encode the value using some kinda of crypto to generate a hash
so you link looks like
<https://accountnum.netsute.com/etc/etc/etc?hash=s234SDFjc12348SDFjl84jf09FSDFliu34jfs>
that way no one can easily spoof a good link
in the suitelet you decode the hash, check for a corresponding custom record, if there is one you load that custom record with all the transaction specific data you need to update the address
you might also want to compare datecreated on the custom record with new Date() and then see how old the link is and reject them if its greater than some window you determine is reasonable... 24hrs? 48hrs?
on time out rejection provide a button to send another email to the email on file for that custom record, which would generated a new custom record and new link with new hash to that new custom record. that way if they're not trying to hack you and are just slow to click the link they can still make the address update but you don't have all your links that you ever created potentially available for abuse.
this is somewhat similar to a standard forgot password workflow
once you've confirmed that the custom record is good, and that the it is within your timeframe, have the suitelet generate a form for them to input the shipaddress
on submit update the shipaddress on the transaction and presumably release the shipment with a status update.
you can either put 2 links in the email one to confirm address as is, the other for them to update.
or you can do it with a single link and have the form have a way to either confirm or update the current shipadadress.
btw.. what happens if they don't click the link? you just won't ship the order? for ever?Anthony OConnor
03/15/2024, 4:55 PMShawn Talbert
03/15/2024, 6:07 PMAnthony OConnor
03/15/2024, 6:09 PMAmol Loya
03/15/2024, 6:23 PM