# RedTag Mobile App — Production Handoff for Tru

**Date**: May 13, 2026
**From**: TBI DevOps
**To**: Tru Development Team

---

## What's Ready

The AWS production infrastructure for the RedTag Mobile App is configured and ready. Below are the values your team needs to build the production app.

---

## Production Configuration Values

### AWS Cognito (Amplify Config)

```json
{
  "Auth": {
    "Cognito": {
      "userPoolId": "ca-central-1_ykbZiSwok",
      "userPoolClientId": "2qj2ovsreij61c4on86n1spmjm",
      "identityPoolId": "ca-central-1:5bb595a9-13d1-4a44-80c4-2c98d4c42388",
      "region": "ca-central-1",
      "loginWith": {
        "oauth": {
          "domain": "tbi-redtag-prod.auth.ca-central-1.amazoncognito.com",
          "scopes": ["openid", "email", "profile", "phone", "aws.cognito.signin.user.admin"],
          "redirectSignIn": "redtagapp://Home",
          "redirectSignOut": "redtagapp://Splash",
          "responseType": "code"
        }
      }
    }
  }
}
```

### Production API Base URLs

| API Instance | Production URL |
|---|---|
| Vacations BFF (packages, cars, hotels, dynamic) | `https://tbi-rlv-vacations-bff-service.redtag.ca` |
| Profile Backend (profiles, bookings, favourites) | `https://tbi-rlv-profile-backend.prod.tbidevelopment.ca` |
| Flights API (search, fares, booking) | `https://tbi-gg-apis.prod.tbidevelopment.ca` |
| Experiences API (attractions, activities) | `https://tbi-rlv-bff.redtag.ca` |
| AEM CMS (content, deals) | `https://redtag.ca` |

### Lambda ARNs

| Function | ARN |
|----------|-----|
| Pre Sign-up | `arn:aws:lambda:ca-central-1:489176460030:function:tbi-redtag-lambda-pre-signup` |
| Custom Message | `arn:aws:lambda:ca-central-1:489176460030:function:tbi-redtag-lambda-custom` |
| Post Confirmation | `arn:aws:lambda:ca-central-1:489176460030:function:tbi-redtag-lambda-post` |

### Social Login Status

| Provider | Status | Notes |
|----------|--------|-------|
| Google | ✅ Ready | Configured with your Google Console credentials |
| Apple | ⏳ Waiting | **We need the `.p8` private key file from you** (Key ID: GPQ6T9RHZ8) |
| Facebook | ⏳ Waiting | **We need Facebook App credentials once business grants access** |

---

## What We Need From You

### 1. Apple Sign-In Private Key (REQUIRED for launch)

Please provide the `.p8` private key file associated with:
- **Key ID**: GPQ6T9RHZ8
- **Team ID**: KJ8JA6J8Z4
- **Service ID**: com.redtag.cognito.apple

Send securely (not via email/Slack). Use AWS Secrets Manager, encrypted file share, or direct handoff.

### 2. Facebook App Credentials (when available)

Once the business team grants Facebook account access:
- Facebook App ID
- Facebook App Secret

### 3. Google OAuth — Verify Redirect URI

Ensure the following redirect URI is added in your Google Console OAuth client settings:
```
https://tbi-redtag-prod.auth.ca-central-1.amazoncognito.com/oauth2/idpresponse
```

### 4. Firebase PROD Project

Confirm whether you're using a separate Firebase project for production or the same as dev. If separate, no action needed from us — just configure in your app build.

### 5. SES Email Verification

Someone with access to the `no-reply@redtag.ca` mailbox needs to click the AWS verification link that was sent. This enables branded emails (verification codes, welcome emails, password reset) to come from `no-reply@redtag.ca` instead of the default AWS sender.

---

## App Build Checklist

When building the production app, ensure:

- [ ] Amplify config updated with prod values above
- [ ] All API base URLs point to production endpoints
- [ ] Lambda ARN for user availability updated to prod
- [ ] Firebase config points to prod project
- [ ] Adobe Analytics configured for prod environment
- [ ] Deep link scheme `redtagapp://` registered for prod
- [ ] Production signing credentials used (keystore / provisioning profile)
- [ ] Version/build numbers incremented for store submission

---

## Testing After Build

Before submitting to stores, validate:

- [ ] Email/password signup → verification code received → login works
- [ ] Google login → new user created / existing user linked
- [ ] Apple login → new user created / existing user linked (once configured)
- [ ] Forgot password → reset email received → password changed
- [ ] Welcome email received after signup
- [ ] All API calls return data (vacations, flights, profile, experiences)
- [ ] Push notifications received
- [ ] Deep links work (`redtagapp://Home`)

---

## Contact

For any questions or to provide the Apple private key:
- **DevOps Team**: [your contact]
- **AWS Account**: 489176460030 (ca-central-1)

---

*This document contains production credentials. Do not share externally.*