Preference Pages (/preferences, /nl/voorkeuren)

Contractors can manage their job alert preferences via signed, time-limited links from Brevo emails.

Flow:

1. Brevo sends Market notes double opt-in and job alert emails with a signed PREF_URL
2. Link points to /preferences?token=<HMAC-signed-payload> (EN) or /nl/voorkeuren?token=<...> (NL)
3. Page verifies the token via Apps Script endpoint and loads the contractor’s current preferences
4. Contractor can: pause alerts (with resume date), toggle email/WhatsApp on/off, or unsubscribe from all
5. Changes are synced back to Recruit CRM and Brevo

Implementation:

• /src/pages/preferences.astro – English form page
• /src/pages/nl/voorkeuren.astro – Dutch form page
• /src/pages/api/preferences.json.ts – Astro endpoint that calls Apps Script backend
• BrevoPreferences.gs – Apps Script web app (deployed separately)
  • doGet(e) – Verify token and return contractor’s preferences
  • doPost(e) – Update preferences and sync to Recruit CRM + Brevo

Setup required:

1. Add BrevoPreferences.gs to “Axeleon automations” Apps Script project
2. Deploy as web app: Deploy > New > Web app > Execute as “Me” > Access “Anyone”
3. Copy deployment URL
4. Update website environment (Netlify): Set PREF_URL_ENDPOINT to the deployment URL
5. Update website API to call the endpoint: modify /src/pages/api/preferences.json.ts to call the Apps Script deployment URL

Token structure:

• Payload: base64(crm_id|candidate_id|timestamp) (timestamp in ms)
• Signature: HMAC-SHA256(payload, PREF_SECRET)
• Token: payload.signature
• Validity: 90 days

Recruit CRM fields used:

• emailConsentFieldId = 10 (values: “Opted in” | “Opted out”)
• candidateFields.whatsapp_ok_fieldId = 18 (values: “Yes” | “No”) [needs confirmation]
• pausedUntilFieldId = 20 [needs to be created if missing]

Brevo fields updated:

• PAUSE_UNTIL (ISO date or empty)
• List subscriptions: “Network – job alerts (email)” and “Network – job alerts (WhatsApp)”