The No-Login Customer Portal: Order Status, Warranty Lookup, and Support in One Link
CareSuite's customer portal handles ordering, warranty lookup, support requests, and ticket tracking behind a single link — with no account, no password, and no login screen for the customer.
Every "where is my order" or "is my warranty still valid" message that reaches a support rep is a message that didn't need a person to answer it. CareSuite's customer portal exists to intercept exactly that category of question — and it does it without ever asking the customer to create an account.
Four tabs, no login
The portal lives at a single link and presents four tabs: Order (browse products, place an order, and view order history), Warranty (look up a warranty by its code), Support (submit a new support request), and Track (check the status of a ticket by its code). There's no sign-up flow, no password, no "forgot your email" recovery step — the entire experience is designed around a customer who has never logged into anything for your business and shouldn't have to now.
Identity in the order tab works by phone number: a customer enters the phone they registered with your business, and if it matches an existing customer record, they're shown their tier and can start ordering. No account creation, no session that outlives the tab. Warranty lookup and ticket tracking work the same way — enter the code printed on your warranty card or given to you when you filed a ticket, and the portal returns the status.
What each tab actually does
Order lets an identified customer browse your product catalog, build a cart with quantities, and place an order — the portal shows subtotal, tax, and total before confirming, and hands back an order code on success. The same tab doubles as order history: a customer can pull up past orders and see their status without calling in to ask.
Warranty takes a warranty code (the kind printed on a physical warranty card) and returns the product name, expiry date, and current status — active, expired, or voided.
Support is a simple form: name, phone, subject, and a description of the issue. Submitting it creates a support ticket and returns a ticket code the customer can use later.
Track takes that ticket code and shows its current status — received, processing, resolved, or closed — along with any resolution notes your team has added.
The multi-tenant ?org= mechanic
If your business runs the portal as part of a multi-tenant setup, the portal link carries an ?org= query parameter identifying which company's data the page should show. The page reads that parameter once from the URL and attaches it to every API call it makes afterward — both as a query parameter on lookups and as a body field on submissions. An empty org value is treated as valid too, which matters for older or demo accounts that predate multi-tenancy being turned on. In practice this means the link you hand a customer — printed on a receipt, sent by SMS, included on a warranty card — is what determines whose catalog and whose tickets they're interacting with, not anything they have to configure themselves.
Why it's exempt from login by design
This isn't an accidental gap in your app's authentication — it's a deliberate exemption. CareSuite's middleware maintains an explicit list of public page prefixes, and /portal (along with /print, used for printable quotes and orders) is on that list. The exemption goes all the way down: the app's own request proxy, the shared auth package, and the platform gateway's public-prefix handling all have to agree a route is meant to be public before it's actually reachable without a session. That's worth knowing if you're evaluating whether this is safe to hand out widely — it is, by design, but it also means the portal shows only what its own routes expose (catalog, warranty-by-code, ticket-by-code), not a general window into your CRM data.
Where to put the link
The portal earns its keep in exactly the places a customer would otherwise have to ask a person: printed on a receipt or invoice, included in an order-confirmation message, attached to a physical warranty card, or linked from your website's "track my order" page. Every one of those is a moment where a customer already has a specific question — order status, warranty status, ticket status — that the portal answers without a wait.