Event Horizon is built as a serverless platform using Firebase and Cloud Functions. This short post summarizes the architecture and the tradeoffs between JWT and TOTP for ticket validation.

Key points:

  • Free events: JWT provides instant, offline validation. Great for quick check-ins and low-cost distribution.
  • Paid events: Rotating TOTP secrets provide strong replay protection and allow server-side revocation.