Library federation across instances
Library federation lets a Seatmap instance pull library content from another Seatmap instance over HTTP. Use it when you run a self-hosted deployment and want to consume the schema library published from another instance without replicating the publisher’s database.
This page is the user-facing overview. For technical setup steps, contact the Seatmap team or your operator.
Roles
- Source instance publishes library content. It issues federation access for consumer instances.
- Consumer instance is configured with the source URL and an access credential. It pulls library content on demand and renders it alongside its own in-instance library entries.
A single instance can be a source, a consumer, or both.
How it works
- A global admin on the source instance issues federation access for the consumer.
- The consumer’s operator stores the credential and configures the source URL.
- When users on the consumer instance browse the library, federated entries appear in the same grid as in-instance entries.
- When a user copies a federated venue, the consumer instance fetches the schema and assets from the source over HTTPS, materialises them into the consumer’s database and asset store, and records provenance.
What’s enforced
- Authentication: every federated request carries the credential. The source verifies it before serving content.
- Rate limiting: the source instance enforces a per-credential rate limit (default 60 requests per minute, configurable).
- Audit: every successful and failed pull is recorded for review on the source side.
- Snapshot semantics: federated copies are frozen at copy time. The consumer owns the copy from that moment forward — source-side updates never propagate.
What is not federated
- User identity — federation is data-only. Users do not log in across instances.
- Pricing, events, bookings — same as in-instance library. Layouts only.
- Multi-source pulls — a consumer instance has at most one configured source in this release.
Operating notes
- Credentials are revocable but not rotatable. To rotate, revoke the old credential and issue a new one — the consumer must update its configuration.
- If the source is unreachable, federated entries simply do not appear on the consumer side. In-instance library entries continue to work.
- Provenance always points to the original source — even if a federated copy is later copied again within the consumer instance, the second-order copy still references the original instance.