# Scan tickets at the door

## Public help

Scanner users should scan the signed QR code from a completed ticket. The scanner API validates the signed payload and ticket/event relationship.

**Tested outcomes**

- Valid ticket scan succeeds once.
- Duplicate scan is rejected or flagged distinctly.
- Wrong-event scan is rejected.
- Invalid token is rejected.
- Unauthenticated API requests return JSON `401`.

## Verification evidence

`Scanner Door Operations: QR Validation, Duplicate, Wrong Event`, `Live Scanner API Retest With Browser-Like Headers`.

## Last verified

Verified against the staging website on 2026-06-13. Mobile apps were not tested in this pass.