Agilix Shop integration with Allegro

• listing agilix.dog shop products as Allegro offers and keeping their name, description, images and price up to date;
• keeping one shared stock level - a sale in the shop lowers the quantity of the Allegro offer, and a sale on Allegro lowers the shop stock, usually within a minute;
• bringing paid Allegro orders into the shop order panel, so they are fulfilled together with orders placed in the shop;
• sending the fulfilment status and the tracking number back to Allegro.

The application is used only by the administrator of the agilix.dog shop, in the shop settings of the admin panel. The administrator connects one Allegro seller account - the one the shop sells from. Buyers and other Agilix users never sign in to Allegro through this application and have no access to its settings.

The administrator ticks "Synchronise with Allegro" on a product and chooses the category, the required parameters and the Allegro price. After the product is saved, the Agilix server uploads the images to Allegro in the background, creates or updates the offer (product, category and parameters, GPSR producer and responsible person data, price, quantity, shipping rates, return and complaint conditions) and publishes it.

• Unticking the box, deactivating the product or running out of stock ends the offer; availability coming back reactivates it.
• Changes go through a background job queue, so editing in the shop never waits for Allegro.
• If Allegro rejects an offer, the administrator sees the error code and Allegro's message next to the product and can retry the sync.

• Once a minute the server reads the order event journal from the last processed event.
• An order enters the shop only when it is ready for processing (READY_FOR_PROCESSING) and has not been cancelled; every order is imported exactly once and the stock drops by the ordered quantity.
• Cancelling an order on Allegro cancels it in the shop and restores the stock.
• When the administrator changes the order status or ships the parcel, the application updates the fulfilment status on Allegro and adds the tracking number.
• Refunds for Allegro orders are handled in the Allegro panel, outside the application.

The application uses the standard OAuth 2.0 Authorization Code flow provided by Allegro. It never asks anyone for a login, password, Client ID or Client Secret.

1. The administrator clicks "Connect to Allegro" in the shop settings. The server creates a signed state parameter, valid for 15 minutes and bound to that administrator.
2. The browser goes to the Allegro sign-in page (https://allegro.pl/auth/oauth/authorize), where the seller signs in to their account and consents to the application's permissions.
3. Allegro redirects to the registered address https://api.agilix.dog/allegro/oauth/callback. The server checks the signature and expiry of state and that the user is still a shop administrator, then exchanges the code for tokens (https://allegro.pl/auth/oauth/token), authenticating with the application's own Client ID and Client Secret.
4. The server reads the login of the connected account and saves the connection. The refresh token is stored on the server only, encrypted with AES-256-GCM. The access token is refreshed automatically, and each new refresh token replaces the previous one immediately.

The Client Secret and the tokens never reach the browser, the mobile app or any third party.

The application processes only the data needed to sell: the shop's offer data and Allegro order data - name, delivery address or pickup point, phone number, the allegromail.pl e-mail address, invoice details, ordered products and the message to the seller.

Order data is used only to fulfil and ship that order. The shop sends Allegro buyers no e-mails at all - neither transactional nor marketing - and never uses their data for marketing.

• The application uses only its own Client ID and Client Secret, kept as server secrets; it shares them with no one and never asks users for their keys.
• It gains access to a seller account only through OAuth 2.0, with the seller's consent and within the permissions listed above.
• Every request carries a fixed User-Agent header identifying the application: Agilix-Sklep/1.0.0 (+https://agilix.dog/).
• The application respects the limits: it polls the order journal once a minute, updates offers only after a product changes, and after a 429 response waits as long as the Retry-After header says.
• It never bulk-downloads offers or data of other sellers and buyers; API data is used only to run the connected account's sales.
• All communication uses HTTPS only, and tokens are stored encrypted.

The administrator can click "Disconnect" in the shop settings at any time - the server then deletes the stored tokens and the offer links, and the application stops sending requests for that account. Access can also be revoked on the Allegro side, in the account settings; the application then marks the connection as disconnected and shows this to the administrator.

Questions about the application: adam@agilix.dog.