RabbitMQ Communication

The Nervous System

RabbitMQ is the primary inter-service communication mechanism for FaceKom. All communication between vuer_css and vuer_oss flows through it. There is no direct HTTP or DB access from vuer_css to vuer_oss.

Messaging Patterns

The system uses four patterns from @techteamer/mq:

Pattern	Direction	Semantics	Count
RPCServer / RPCClient	Request-response	Synchronous-style calls with timeout	40+ endpoints
QueueServer / QueueClient	Fire-and-forget	Async message delivery	17+ pairs
Publisher / Subscriber	Broadcast (fanout)	One-to-many notifications	3 channels

graph LR
    subgraph vuer_css
        RPC_C[RPC Clients ~30]
        QC[Queue Clients]
        QS_CSS[Queue Servers]
        RPC_S_CSS[RPC Servers 4]
    end

    subgraph RabbitMQ
        RPC_Q[RPC Queues]
        FaF_Q[Fire-and-Forget Queues]
        PubSub[Fanout Exchanges]
    end

    subgraph vuer_oss
        RPC_S[RPC Servers 40+]
        QS[Queue Servers 17+]
        QC_OSS[Queue Clients]
        Pub[Publishers 3]
        Sub[Subscribers]
    end

    RPC_C -->|request| RPC_Q -->|dispatch| RPC_S
    QC -->|fire| FaF_Q -->|deliver| QS
    QC_OSS -->|fire| FaF_Q -->|deliver| QS_CSS
    Pub -->|broadcast| PubSub -->|fanout| Sub
    RPC_S_CSS -.->|reverse calls<br/>from oss| RPC_Q

RPC Servers (vuer_oss) — 40+ Endpoints

These are the “API” that vuer_oss exposes to vuer_css via RabbitMQ.

Identity & Auth

Server	Purpose
JwtAuth	Validates JWT invite tokens via hook system
JwtKioskAuth	Validates encrypted JWT for kiosk devices (decrypts with facekomPont key)
CreateCustomer	Creates or retrieves customers by token, assigns fakeSessionId
GetCustomer	Retrieves customer data
ClientGate	Client gate operations

Self-Service V2 (16 registered actions)

Action	Purpose
selfService:v2:register	Creates encrypted JWT for customer
selfService:v2:start	Starts self-service session
selfService:v2:abort	Aborts session
selfService:v2:getCurrentStep	Get current workflow step
selfService:v2:getRemainingSeconds	Get session time remaining
selfService:v2:skip	Skip current step
selfService:v2:setConsent	Record consent
selfService:v2:setInput	Submit form input
selfService:v2:requestSmsToken	Request SMS verification token
selfService:v2:photo:candidate	Submit photo candidate
selfService:v2:photo:finalize	Finalize photo capture
selfService:v2:video:start	Start video recording
selfService:v2:video:stop	Stop video recording
selfService:v2:hologram:screenshot	Hologram screenshot
selfService:v2:hologram-v2:photo	V2 hologram photo
selfService:v2:stream:start	Start WebRTC stream
selfService:v2:stream:answer	WebRTC answer
selfService:v2:stream:candidate	ICE candidate
selfService:v2:liveness-check-v2:photo	Liveness check photo
selfService:v2:clientGateDemo:login	Client gate demo login

Video Chat & Transport

Server	Purpose
VideoChatOss	Join/leave videochat events
TransportOss	Transport layer for WebRTC signaling
Presentation	Document presentation in calls
Recognition	Face recognition operations

Documents & Flows

Server	Purpose
FlowDocuments	Flow document management
DocumentUpload	Document upload
DocumentDelete	Document deletion
CustomerDocuments	Customer document retrieval

Admin & System

Server	Purpose
SystemCheck	systemCheck:getJanus action
DeviceChange	Device change events
DeviceCompatibilityCheckRPCServer	Device compatibility
WaitingRoom	Waiting room operations
Appointment	Appointment scheduling
CallbackRequest	Callback request handling
OpenHours	Business hours
OpenHoursCalendars	Calendar management
PartnerService	Partner service integration
PortalRPCServer	Portal data
PortalDataRPCServer	Portal data queries
MediaContentRPCServer	Media content
CustomContentRPCCServer	Custom content
IdentificationRouterRPCServer	Identification routing
KioskAliveCheckRPCServer	Kiosk health check

Background & Processing

Server	Purpose
SelfServiceActions	Self-service action handlers
SelfServiceUpload	Self-service uploads
SelfServiceRoomExport	Self-service room export
RoomExport	Room data export (300s timeout, prefetch 1)
Archive	Archival operations
Background	Background processing

Reports & Admin

Server	Purpose
Reports	General reports
XlsxReportRPCServer	Excel report generation
XmlReportRPCServer	XML report generation
CronManagerRPCServer	Cron management
FlowAutoClearRPCServer	Flow auto-clear
IntegrationLogRPCServer	Integration log (with rate limiting)
Ping	Health check

RPC Clients (vuer_css → vuer_oss) — ~30

Client	Mirrors Server
JwtAuth	JwtAuth
JwtKioskAuth	JwtKioskAuth
CreateCustomer	CreateCustomer
GetCustomer	GetCustomer
ClientGate	ClientGate
SelfServiceV2	Self-Service V2
SelfServiceActions	SelfServiceActions
SelfServiceUpload	SelfServiceUpload
SelfServiceRoomExport	SelfServiceRoomExport
DocumentUpload	DocumentUpload
DocumentDelete	DocumentDelete
FlowDocuments	FlowDocuments
CustomerDocuments	CustomerDocuments
Appointment	Appointment
RequestCallback	CallbackRequest
WaitingRoom	WaitingRoom
OpenHours	OpenHours
OpenHoursCalendars	OpenHoursCalendars
PartnerService	PartnerService
PortalDataRPCClient	PortalDataRPCServer
Presentation	Presentation
SystemCheck	SystemCheck
DeviceChange	DeviceChange
DeviceCompatibilityCheckRPCClient	DeviceCompatibilityCheck
IdentificationRouterRPCClient	IdentificationRouter
KioskAliveCheck	KioskAliveCheck
MediaContent	MediaContentRPCServer
CustomContentRPCCLient	CustomContentRPCCServer
TransportOss	TransportOss
VideoChatOss	VideoChatOss
RoomExport	RoomExport

RPC Servers (vuer_css) — Receiving FROM vuer_oss

Server	Purpose
Ping	Health check from OSS
SystemOss	System commands from OSS
TransportCss	Transport commands to CSS
DocumentScanRPCServer	Document scan requests

Queue Servers (Fire-and-Forget)

vuer_oss Queue Servers (receive from vuer_css)

Queue Server	Purpose
CustomerHistory	Logs customer history events
Customer	Customer updates
Feedback	Feedback submissions
VideoChatOss	Videochat join/leave actions
TransportOss	Transport events
WebRTCLog	WebRTC diagnostic logs
ClientErrorLog	Client-side error logging
CssClientPingResult	Ping results from CSS
SelfServiceEvents	Self-service event tracking
SelfServiceV2	Self-service V2 queue events (prefetch 10)
KioskDocumentScanQueueServer	Kiosk doc scan (60s timeout, no retry)
Convert / ConvertState	Media conversion jobs
Storage / StorageState	Storage operations
RoomCron / SelfServiceCron	Cron triggers
JobStatusChange	Job status updates

vuer_css Queue Servers (receive from vuer_oss)

Queue Server	Purpose
ServiceBus	General service bus messages
TransportCss	Transport events to CSS
VideoChatCss	Videochat events to CSS
WaitingRoom	Waiting room updates
SelfServiceCss	Self-service notifications
SelfServiceV2Css	Self-service V2 notifications

Pub/Sub (Broadcast)

Publishers (vuer_oss)

Channel	Purpose
CustomerKey	Customer encryption key changes
SettingsChange	Settings updates
BackgroundProcess	Background process notifications

Subscribers in vuer_oss mirror these publishers for internal broadcast.

eSign RPC (esign_css ←> esign_oss)

Queue	Direction	Purpose
esign:rpc-app	css → oss	App registration/management
esign:rpc-customer	css → oss	Customer auth, login, 2FA
esign:rpc-timestamp	css → oss	Timestamp operations
esign:rpc-document	css → oss	Document CRUD
esign:rpc-contract	css → oss	Contract management
esign:rpc-offer	css → oss	Offer operations
esign:rpc-signature	css → oss	Signature creation/verification
esign:rpc-signature-check	css → oss	Signature check
esign:css-ping	oss → css	Health check
esign:cron-ping	oss → css	Cron health check
esign:rpc-system-oss	oss → css	System config push

Other Service RPC

Queue	Direction	Purpose
kkszb-rpc	vuer_oss → nyilvantarto-scraper	Government registry queries
pdf-validate	esign_oss → pdfservice	PDF signature validation
pdf-prepareSignedDocument	esign_oss → pdfservice	Prepare PDF for signing
pdf-insertSignature	esign_oss → pdfservice	Insert CMS signature
pdf-checkActiveComponents	esign_oss → pdfservice	Check for JS/forms in PDF

RabbitMQ Configuration

Property	Value
Protocol	AMQPS (TLS on port 5671)
Auth	Client certificates
Management	Port 15672
Version	4.1.4
Connection pool	Used by esign_oss for multiple queue managers

Related

• FaceKom — Platform overview
• vuer_oss — Primary RPC server
• vuer_css — Primary RPC client
• esign — eSign RPC subsystem
• pdfservice — PDF service RPC
• nyilvantarto-scraper — Gov registry RPC
• infrastructure — Container and network setup
• authentication — Auth over RPC