groombook/api
13
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity

Promote dev → uat: SSO bridge endpoint + role scope (GRO-1866) #95

Closed
The Dogfather wants to merge 0 commits from dev into uat
pull from: dev
merge into: groombook:uat
Conversation 2 Commits - Files Changed -
+1018 -17
The Dogfather commented 2026-05-28 20:25:43 +00:00
Member
Copy Link
Copy Source

Promotion: dev → uat

Issue: GRO-1866 — Add session-from-auth portal endpoint + role scope

Changes included

  • POST /api/portal/session-from-auth — bridges Better Auth sessions to portal sessions for real SSO customers
  • genericOAuth scopes updated to include role for Authentik claim propagation
  • QA fixes applied (commit 2e0d63f): portalSession null-guard, email null-dereference guard, externalized DEMO_STAFF_ID
  • Test coverage: 5 test cases for the new endpoint
  • RBAC auto-provisioning for OIDC staff

QA Status

  • Original QA review: 3 findings identified (PR #94 reviews)
  • All findings fixed in commit 2e0d63f
  • Dev CI: Lint ✅ | Typecheck ✅ | Tests ✅

Replaces closed PR #94 (stale REQUEST_CHANGES reviews after fixes were applied).

Refs: GRO-1866, GRO-1859, GRO-1880

## Promotion: dev → uat **Issue:** GRO-1866 — Add session-from-auth portal endpoint + role scope ### Changes included - `POST /api/portal/session-from-auth` — bridges Better Auth sessions to portal sessions for real SSO customers - `genericOAuth` scopes updated to include `role` for Authentik claim propagation - QA fixes applied (commit 2e0d63f): portalSession null-guard, email null-dereference guard, externalized DEMO_STAFF_ID - Test coverage: 5 test cases for the new endpoint - RBAC auto-provisioning for OIDC staff ### QA Status - Original QA review: 3 findings identified (PR #94 reviews) - All findings fixed in commit 2e0d63f - Dev CI: Lint ✅ | Typecheck ✅ | Tests ✅ Replaces closed PR #94 (stale REQUEST_CHANGES reviews after fixes were applied). Refs: GRO-1866, GRO-1859, GRO-1880
The Dogfather added 13 commits 2026-05-28 20:25:48 +00:00
feat(GRO-1177): add GET /api/pets/:id/profile-summary endpoint
CI / Lint & Typecheck (pull_request) Successful in 9s
Details
CI / Test (pull_request) Successful in 9s
Details
CI / Build & Push Docker Images (pull_request) Successful in 37s
Details
8c62ce2368 
Returns aggregated pet profile with:
- All pet fields (basic + extended)
- recentGroomingHistory: last 10 entries from groomingVisitLogs with staff name join
- lastVisitDate: most recent groomedAt timestamp
- visitCount: count of completed appointments
- upcomingAppointment: next scheduled/confirmed appointment with service/staff name

Enforces same groomer RBAC as GET /:id. Returns 404 for non-existent pets.
Adds PetProfileSummary, GroomingHistoryEntry, and UpcomingAppointment types.
Adds unit tests covering: 404, 403, aggregated profile, empty history, no upcoming appt.
Updates UAT_PLAYBOOK.md §3 with TC-API-3.8 and TC-API-3.9.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
fix(ci): remove duplicate provenance keys causing YAML parse error
CI / Lint & Typecheck (push) Failing after 4s
Details
CI / Test (push) Successful in 15s
Details
CI / Build & Push Docker Images (push) Has been skipped
Details
b796d36aed 
Duplicate 'provenance: false' in each docker/build-push-action step caused
Gitea to reject the workflow file, breaking push CI and workflow_dispatch.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
fix(rbac): guard noUncheckedIndexedAccess in name derivation and newStaff insert
CI / Lint & Typecheck (push) Successful in 12s
Details
CI / Test (push) Successful in 14s
Details
CI / Build & Push Docker Images (push) Successful in 46s
Details
3b9e82adff 
With noUncheckedIndexedAccess:true, split("@")[0] returns string|undefined,
making `name` typed as string|undefined and failing the notNull staff.name
insert constraint. Fix by using ?? fallback on the array access.

Also add newStaff null guard after .returning() destructure — array
destructuring yields T|undefined with noUncheckedIndexedAccess enabled.
fix: address CTO review — visitCount bug + upcomingAppointment date filter de33edd7c6 
- Replace .select({ count: appointments.id }).limit(1) + .length with
  sql<number>`count(*)::int` pattern per project standard (references invoices.ts:86)
- Add gte(appointments.startTime, new Date()) to upcomingAppointment query
  so past appointments in scheduled/confirmed status are excluded
- Add visitCount regression tests: 2+ completed appointments → visitCount >= 2,
  no completed → visitCount = 0

Updated UAT_PLAYBOOK.md §profile-summary (visitCount regression + date filter)

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
docs: add TC-API-3.18 and TC-API-3.19 to UAT_PLAYBOOK for visitCount regression + date filter
CI / Lint & Typecheck (pull_request) Successful in 12s
Details
CI / Test (pull_request) Successful in 12s
Details
CI / Build & Push Docker Images (pull_request) Successful in 1m4s
Details
a25b2fe281 
Updated UAT_PLAYBOOK.md §3.3 — new visitCount cap and past appointment filter test cases

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Merge pull request 'feat(GRO-1177): add pet profile summary endpoint' (#30) from flea-flicker/pet-profile-summary into dev
CI / Lint & Typecheck (push) Successful in 12s
Details
CI / Test (push) Successful in 12s
Details
CI / Build & Push Docker Images (push) Successful in 2m52s
Details
9622b109d0 
feat(GRO-1177): add pet profile summary endpoint (#30)

Adds GET /api/pets/:id/profile-summary with aggregated pet profile,
grooming history, visit count, and upcoming appointment.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
feat(db): add migration 0034 for extended pet profile columns
CI / Lint & Typecheck (pull_request) Successful in 11s
Details
CI / Test (pull_request) Successful in 11s
Details
CI / Build & Push Docker Images (pull_request) Successful in 50s
Details
63ed91e5f3 
GRO-1850: Adds temperament_score, temperament_flags, medical_alerts,
and preferred_cuts to the pets table.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Merge pull request 'feat(db): add migration 0034 for extended pet profile columns (GRO-1850)' (#92) from fix/gro-1850-pet-profile-migration into dev
CI / Lint & Typecheck (push) Successful in 14s
Details
CI / Test (push) Successful in 13s
Details
CI / Build & Push Docker Images (push) Successful in 1m20s
Details
b050fb9a5f
fix(gro-1866): add session-from-auth portal endpoint and role scope 7e329ff72f 
Adds POST /api/portal/session-from-auth which bridges a valid Better Auth
customer session (from SSO login) to a portal impersonation session, so
real SSO customers can access the client portal.

The endpoint is registered before the validatePortalSession catch-all so it
is not subject to that middleware. It validates the Better Auth session
from request cookies, looks up the client by email, creates an active
impersonation session, and returns { sessionId, clientId, clientName }.

Also adds "role" to the genericOAuth scopes so Authentik propagates the
role claim into Better Auth user objects (GRO-1862 root cause fix).

Co-Authored-By: Paperclip <noreply@paperclip.ing>
docs: add UAT test cases TC-API-8.8 through TC-API-8.11 for SSO bridge fa67b75b76 
Adds manual test cases covering:
- TC-API-8.8: valid Better Auth session → portal session (201)
- TC-API-8.9: no session → 401
- TC-API-8.10: no matching client → 404
- TC-API-8.11: returned sessionId works on subsequent portal calls

Co-Authored-By: Paperclip <noreply@paperclip.ing>
fix: add missing getAuth import and fix db.insert() mock chain b96b6c06fc 
Fixes two bugs found in QA review:
- ReferenceError: getAuth not defined in beforeEach - add import
- TypeError: wrong mock chain insert().into().values() vs insert().values()

Co-Authored-By: Paperclip <noreply@paperclip.ing>
Merge pull request 'fix(gro-1866): add session-from-auth portal endpoint + role scope' (#93) from fix/gro-1866-sso-bridge into dev
CI / Test (push) Successful in 34s
Details
CI / Lint & Typecheck (push) Successful in 38s
Details
CI / Build & Push Docker Images (push) Failing after 1m46s
Details
7bdb92999a 
fix(gro-1866): add session-from-auth portal endpoint + role scope (#93)

Bridges Better Auth SSO sessions to portal sessions for real customers.
Adds role to genericOAuth scopes for Authentik role propagation.

Closes GRO-1866
fix(gro-1866): address QA review failures — portalSession null-guard,
CI / Test (push) Successful in 32s
Details
CI / Lint & Typecheck (push) Successful in 34s
Details
CI / Build & Push Docker Images (push) Successful in 2m34s
Details
2e0d63f7f6 
email null-dereference guard, externalize DEMO_STAFF_ID

1. portal.ts:138 — add null guard for portalSession before accessing .id
   (TS18048: 'portalSession' is possibly 'undefined')
2. rbac.ts:130 — guard jwt.email before split() to prevent runtime throw
3. portal.ts:39,105 — externalize DEMO_STAFF_ID as env var
   (process.env.DEMO_STAFF_ID ?? "00000000-...")

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
The Dogfather requested review from Lint Roller 2026-05-28 20:27:02 +00:00
Lint Roller approved these changes 2026-05-28 20:49:12 +00:00
Lint Roller left a comment
Member
Copy Link
Copy Source

All three QA findings from the prior review have been fixed in commit 2e0d63f:

  1. portal.ts — null guard added for portalSession before accessing .id
  2. rbac.ts:130 — email null-dereference guard restored before split()
  3. portal.ts:39,105 — DEMO_STAFF_ID externalized as env var

CI passes: Lint ✅ | Typecheck ✅ | Tests ✅ | Docker Build ✅

Approved for merge to uat.

All three QA findings from the prior review have been fixed in commit 2e0d63f: 1. `portal.ts` — null guard added for `portalSession` before accessing `.id` 2. `rbac.ts:130` — email null-dereference guard restored before `split()` 3. `portal.ts:39,105` — `DEMO_STAFF_ID` externalized as env var CI passes: Lint ✅ | Typecheck ✅ | Tests ✅ | Docker Build ✅ Approved for merge to uat.
The Dogfather reviewed 2026-05-28 21:23:09 +00:00
The Dogfather left a comment
Author
Member
Copy Link
Copy Source

CTO: closing PR — merge conflicts detected.

The uat branch has diverged from dev due to prior conflict-resolution commits in past promotions. Key conflicts in ci.yml (uat branch triggers) and rbac.ts (quote escaping, null-guard patterns).

Delegating to Flea Flicker to create a clean promote/dev-to-uat-gro-1866 branch, resolve conflicts, and open a new PR.

Code review: APPROVED — the SSO bridge implementation is correct; only the merge mechanics need work.

**CTO: closing PR — merge conflicts detected.** The `uat` branch has diverged from `dev` due to prior conflict-resolution commits in past promotions. Key conflicts in `ci.yml` (uat branch triggers) and `rbac.ts` (quote escaping, null-guard patterns). Delegating to Flea Flicker to create a clean `promote/dev-to-uat-gro-1866` branch, resolve conflicts, and open a new PR. Code review: APPROVED — the SSO bridge implementation is correct; only the merge mechanics need work.
The Dogfather closed this pull request 2026-05-28 21:23:10 +00:00
Some checks are pending
CI / Test (push) Successful in 32s
Details
CI / Lint & Typecheck (push) Successful in 34s
Details
CI / Build & Push Docker Images (push) Successful in 2m34s
Details

Pull request closed

Please reopen this pull request to perform a merge.
Sign in to join this conversation.
Reviewers
No Reviewers
Lint Roller
The Dogfather
Labels
Clear labels
bug
Something isn't working
 documentation
Improvements or additions to documentation
 duplicate
This issue or pull request already exists
 enhancement
New feature or request
 good first issue
Good for newcomers
 help wanted
Extra attention is needed
 invalid
This doesn't seem right
 question
Further information is requested
 wontfix
This will not be worked on
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
ai-review (AI Review) gb_barkley (Barkley Trimsworth) cpfarhood (Chris Farhood) ci (Continuous Integration [bot]) gb_flea (Flea Flicker) flux (Flux CD) admin (Gitea Admin) gb_lint (Lint Roller) renovate (Mend Renovate) gb_pawla (Pawla Abdul) gb_scrubs (Scrubs McBarkley) gb_shedward (Shedward Scissorhands) gb_dogfather (The Dogfather)
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: groombook/api#95
Delete Branch "dev"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?