Workers

Workers are the people picking orders on the warehouse floor. Each worker has a unique ID and authenticates with a 4-digit PIN.

Worker Fields

Field	Description
Worker ID	Unique identifier (e.g., worker-001)
Name	Display name (e.g., Alice Manager)
PIN	4-digit authentication code (BCrypt-hashed in the database)
Role	picker, manager, or admin

Roles

Role	Mobile App	Web Dashboard
Picker	Scan barcodes, view assigned waves	No dashboard access
Manager	Scan barcodes, view assigned waves	Full dashboard access
Admin	Scan barcodes, view assigned waves	Full dashboard + worker management

Managers and admins can:

• Create and manage waves, orders, and products
• View live picking progress
• Review discrepancies
• Manage worker accounts (admin only)

Adding a Worker

1. Navigate to Workers in the dashboard.
2. Click Add Worker.
3. Enter a Worker ID, Name, and PIN.
4. Select the role (picker, manager, or admin).
5. Click Save.

The PIN is hashed with BCrypt before storage. The original PIN is not retained — provide the worker with their PIN securely.

Worker Authentication Flow

1. Worker enters their Worker ID and PIN on the mobile app or dashboard.
2. The API validates the PIN against the BCrypt hash.
3. A JWT is issued with 24-48 hour expiry.
4. The token is stored locally and sent with each request.

No email, no password, no IT involvement. Workers just need their ID and PIN.

Deactivating a Worker

To prevent a worker from logging in, delete or disable their account from the Workers section. Active tokens will still work until they expire (24-48 hours). For immediate revocation, restart the API with a new JWT_SECRET.