We're working on a project where we're replacing our existing web store with a custom Magento integration.
We need a way for a guest customer to retrieve information about their order by following a unique URL that can't just be guessed from the sequential order number (i.e. we need a unique secret ID for an order).
An order fetched from the API contains a field named protect_code, which at first glance seems to be doing exactly this.
Do we assume correctly that the protect code can safely be used for this use case? The official docs are extremely scarce regarding this field, so does anyone know what its official purpose actually is?
