Comparing 63d7aaa8c2..7f7e908e45 - api

groombook/api

Fork 0

Author	SHA1	Message	Date
Flea Flicker	7f7e908e45	feat(GRO-2425): split CORS_ORIGIN on commas for multiple trusted auth origins CI / Test (pull_request) Successful in 32s Details CI / Lint & Typecheck (pull_request) Successful in 38s Details CI / Build & Push Docker Images (pull_request) Failing after 1m2s Details Changes trustedOrigins from a single-string wrap to a comma-split array so both demo.groombook.dev and groombook.farh.net can coexist as trusted Better-Auth origins via a single CORS_ORIGIN env value. Updated UAT_PLAYBOOK.md §4.1 — added TC-API-1.27 and TC-API-1.28 for multi-origin callbackURL coverage. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-06-18 00:42:45 +00:00
Flea Flicker	10b78d810d	Merge pull request 'feat(GRO-2359): add POST /api/portal/clients-from-auth for OOBE' (#212 ) from feature/2357-p2-portal-clients-from-auth into dev CI / Test (push) Successful in 26s Details CI / Lint & Typecheck (push) Successful in 32s Details CI / Build & Push Docker Images (push) Successful in 41s Details GRO-2359 (api): feat(GRO-2359): add POST /api/portal/clients-from-auth for OOBE (#212)	2026-06-11 16:34:34 +00:00
Flea Flicker	cdeebec021	feat(GRO-2359): add POST /api/portal/clients-from-auth for OOBE (web) CI / Test (pull_request) Successful in 29s Details CI / Lint & Typecheck (pull_request) Successful in 41s Details CI / Build & Push Docker Images (pull_request) Successful in 1m40s Details The OOBE flow on the web portal calls this endpoint to create a fresh `clients` row bound to the Better Auth user's email when the SSO bridge returns 404. Returns 201 on success, 409 if a client with that email already exists (portal-selection case), 401/503 on auth issues, 400 on invalid body. The OOBE success path navigates the user back to `/` and lets the existing `session-from-auth` re-bridge; the new client is now resolvable by email, so the bridge mints a real portal session. Tests cover: 401 (no session), 400 (zod), 201 + persisted values (name trimmed, optional fields normalized to null), 409 (existing client or unique-constraint race), 503 (auth not configured). Paired with the web PR on `feature/2357-p2-sso-to-oobe-routing`. Co-Authored-By: Paperclip <noreply@paperclip.ing>	2026-06-11 16:17:16 +00:00

Author

SHA1

Message

Date

Flea Flicker

7f7e908e45

feat(GRO-2425): split CORS_ORIGIN on commas for multiple trusted auth origins

CI / Test (pull_request) Successful in 32s

Details

CI / Lint & Typecheck (pull_request) Successful in 38s

Details

CI / Build & Push Docker Images (pull_request) Failing after 1m2s

Details

Changes trustedOrigins from a single-string wrap to a comma-split array
so both demo.groombook.dev and groombook.farh.net can coexist as trusted
Better-Auth origins via a single CORS_ORIGIN env value.

Updated UAT_PLAYBOOK.md §4.1 — added TC-API-1.27 and TC-API-1.28 for
multi-origin callbackURL coverage.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-06-18 00:42:45 +00:00

Flea Flicker

10b78d810d

Merge pull request 'feat(GRO-2359): add POST /api/portal/clients-from-auth for OOBE' (#212 ) from feature/2357-p2-portal-clients-from-auth into dev

CI / Test (push) Successful in 26s

Details

CI / Lint & Typecheck (push) Successful in 32s

Details

CI / Build & Push Docker Images (push) Successful in 41s

Details

GRO-2359 (api): feat(GRO-2359): add POST /api/portal/clients-from-auth for OOBE (#212)

2026-06-11 16:34:34 +00:00

Flea Flicker

cdeebec021

feat(GRO-2359): add POST /api/portal/clients-from-auth for OOBE (web)

CI / Test (pull_request) Successful in 29s

Details

CI / Lint & Typecheck (pull_request) Successful in 41s

Details

CI / Build & Push Docker Images (pull_request) Successful in 1m40s

Details

The OOBE flow on the web portal calls this endpoint to create a fresh
`clients` row bound to the Better Auth user's email when the SSO
bridge returns 404. Returns 201 on success, 409 if a client with that
email already exists (portal-selection case), 401/503 on auth issues,
400 on invalid body.

The OOBE success path navigates the user back to `/` and lets the
existing `session-from-auth` re-bridge; the new client is now
resolvable by email, so the bridge mints a real portal session.

Tests cover: 401 (no session), 400 (zod), 201 + persisted values
(name trimmed, optional fields normalized to null), 409 (existing
client or unique-constraint race), 503 (auth not configured).

Paired with the web PR on `feature/2357-p2-sso-to-oobe-routing`.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-06-11 16:17:16 +00:00

Compare commits

3 Commits

uat .. feature/GRO-2425-comma-split-cors-origin

Diff Content Not Available

Compare commits

3 Commits uat .. feature/GRO-2425-comma-split-cors-origin

Diff Content Not Available

3 Commits

uat .. feature/GRO-2425-comma-split-cors-origin