Team Tools Portal
An authenticated internal platform for a marketing agency's team tools: per-user accounts with admin provisioning, a self-service email signature generator, and the home of the quote-to-signature proposal pipeline, all behind one secure login instead of shared passwords and scattered one-off pages.
The problem
A marketing agency’s internal tooling had grown up ad hoc. The pricing calculator was a standalone HTML page anyone could open, email signatures were copied between team members by hand from a source that only worked inside one person’s mailbox, and nothing sat behind individual logins. As the team grew, “send me the link” and shared passwords stopped being acceptable, especially for tools that touch client pricing.
What was built
A single authenticated portal that gives every team member their own login and puts the agency’s internal tools in one place.
- Authentication and administration. Per-user accounts with scrypt password hashing, secure httpOnly session cookies, login rate limiting, and no public signup. Admins provision accounts through one-time expiring setup links, and a self-service forgot-password flow removes the admin from the loop entirely.
- The quote-to-signature pipeline. The portal’s flagship tool turns a sales rep’s product selection into a client-ready proposal PDF and a signature-ready contract packet in about two minutes, with all figures computed by one shared pricing engine. It has its own write-up: the Quote-to-Signature Pipeline.
- Email signature generator. Self-service, with live preview and one-click rich-text copy, replacing the manual copy-paste process for the whole team.
Engineering decisions worth noting
- Security hygiene. All credentials live in server-side environment files. A bootstrap credential caught in a committed config during the repository import was rotated and moved server-side in the same change.
- Boring, dependable auth. No framework magic: scrypt hashing, httpOnly session cookies, rate-limited logins, and expiring one-time links for account setup and password resets, small enough to audit in one sitting.
- A platform, not a page. Building the portal as a shell with accounts and sessions meant each new tool inherits authentication, users, and deployment for free instead of becoming another scattered one-off.
Outcomes
- The whole team self-serves on quotes and signatures behind their own logins, with no shared password.
- Account provisioning and password resets happen without an admin touching anything beyond sending a link.
- Documented and version-controlled for handoff, with a tagged baseline release, changelog, and maintainer guide.
Questions
FAQ
What is the Team Tools Portal?
An internal platform Brian Powell built for a marketing agency that puts the team's tools behind one secure login, including per-user accounts with admin provisioning, a self-service email signature generator, and the agency's quote-to-signature proposal pipeline.
How is the portal secured?
Per-user accounts with scrypt password hashing, secure httpOnly session cookies, login rate limiting, and no public signup. Admins provision accounts through one-time expiring setup links, and a self-service forgot-password flow removes the admin from the loop. All credentials live in server-side environment files.
What tools does the portal host?
The agency's quote-to-signature pipeline, which turns a sales rep's product selection into a client-ready proposal PDF and a signature-ready contract packet, and an email signature generator with live preview and one-click rich-text copy that replaced a manual copy-paste process for the whole team.