BEST-TRACE
An exporter registration and traceability system for the Indonesian Quarantine Agency (Barantin), replacing paper-based approvals with a digital multi-stage workflow across five roles for animal, fish, and plant commodities.
- Project Duration
- March 2026 - July 2026
- Role
- Fullstack Web Developer
Overview
BESTRACE is an exporter registration and traceability platform used by the Indonesian Quarantine Agency to manage certification of business units seeking export approval. It unifies exporter submissions, document verification, tiered approvals, and final decree (SK) issuance into a single fully-audited digital flow. Built on a Next.js (App Router) frontend and a Laravel API backend, it supports three quarantine domains - Animal (AQ), Fish (FQ), and Plant (PQ) - across five user roles: Exporter, Competent Authority, Secretariat, Deputy, and Technical Unit.
Challenges
Exporter registration previously relied on physical paperwork and manual coordination between units, leaving submission status hard to track and verification history undocumented. The technical challenge: each commodity has its own form and document requirements while sharing an identical approval flow, so adding a new form risked duplicating workflow logic. The system also had to integrate with Barantin's internal accounts, which expose no OIDC endpoint.
Solution
Separated the form-data layer from the workflow layer: the approval state machine, per-stage locking, and review logs are polymorphic and shared across all commodities, so a new form only adds its own fields without touching workflow code. Authentication was designed as a hybrid - internal users are verified against the Barantin API, external users managed locally via Fortify/Sanctum - with granular role- and permission-based authorization. Every issued decree carries a QR code linking to a public verification page for authenticity checks.
Key Features
- Tiered CA → Secretariat → Deputy approval flow with per-stage locking
- Multi-commodity registration (animal, fish, plant) with quarantine-specific dynamic forms
- Per-role independent document verification checklists that gate approval
- PDF decree & cover-letter generation with public QR-code verification
- Hybrid authentication: Barantin internal account SSO plus self-service exporter sign-up
- Master data management (commodities, HS codes, ports, countries, technical units) with role-based access control
- Full activity audit trail and per-submission review history