Owners Club Portal for Two Residential Brands

The Challenge

Apartment owners expect a private place for their documents, building information and updates. The developer group runs more than one residential brand and already has a group-wide identity provider and a marketing automation tool. The portal had to separate brands and properties cleanly, protect every file behind login, and make use of existing systems instead of replacing them.

Proposed Architecture

A separate Next.js front end handles sign-in through OpenID Connect and reads content from a headless CMS that acts as the content hub. A thin backend layer sits between them. It maps each owner to their properties, separates data logically by brand and acts as an authenticating proxy, so that even PDF files are served only after sign-in.

Sign-In and Consent

Authentication uses the Authorization Code flow against the group’s shared ID. The scope covers first-time registration, a consent screen for the information the portal receives, session handling and logout. Identity verification stays with the identity provider, so the portal never stores or checks passwords itself.

What the Portal Covers

Phase 1 delivers a brand-themed landing page template used for both brands, plus thirteen responsive member screens built from supplied mockups. The CMS content model covers properties, buildings, monthly construction photos, FAQs, notices, PDF documents and landing pages.

• Four admin roles, scoped by brand and property
• A publish-and-approve workflow for operational content
• A CSV import tool that validates owner and property data
• Email notifications sent through the existing marketing automation tool

Security and Operations

The scope includes a mandatory security checklist: no personal data in URLs, HTTPS throughout, and support for an external vulnerability scan with fixes for any findings in Nexora’s own code. Infrastructure covers development, staging and production environments, brand-specific domains with SSL, a web application firewall, logging and an automated build and deploy pipeline. Testing spans unit, integration and end-to-end checks, with responsive tests on desktop and phone.

Boundaries and Handover

The client supplies the CMS licence, production hosting, operating content and access to the identity provider and automation tool. Nexora implements the supplied mockups rather than designing new UI, delivers one language, and hands over full source in Git, design and API documents and an operations guide. Ownership transfers to the client. Further brands, database separation per brand and the Phase 2 booking and contract features are scoped separately.