groombook/api

T

Chris Farhood 91af671c4e Auto-create staff records for OAuth users with no existing staff record

Fixes GRO-1118 - uat-tester receives HTTP 403 post-login

When a user authenticates via OAuth but has no corresponding staff record,
the RBAC middleware now auto-creates a staff record with a default
"receptionist" role instead of returning 403. This allows new OAuth
users to access the app immediately.

The middleware now checks for staff records in this order:
1. By userId (Better-Auth user ID)
2. By oidcSub (legacy OIDC subject)
3. By email (auto-link existing staff)
4. Create new staff record if authenticated user has email and name

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-05-12 19:17:37 +00:00

.github/workflows

Extract groombook/api from monorepo with CI workflow

2026-05-11 01:26:56 +00:00

Extract groombook/api from monorepo with CI workflow

2026-05-11 01:26:56 +00:00

Auto-create staff records for OAuth users with no existing staff record

2026-05-12 19:17:37 +00:00

.gitignore

Extract groombook/api from monorepo with CI workflow

2026-05-11 01:26:56 +00:00

Dockerfile

fix: update Dockerfile for standalone repo structure

2026-05-11 01:36:48 +00:00

eslint.config.js

Extract groombook/api from monorepo with CI workflow

2026-05-11 01:26:56 +00:00

package.json

Extract groombook/api from monorepo with CI workflow

2026-05-11 01:26:56 +00:00

pnpm-lock.yaml

Extract groombook/api from monorepo with CI workflow

2026-05-11 01:26:56 +00:00

pnpm-workspace.yaml

Extract groombook/api from monorepo with CI workflow

2026-05-11 01:26:56 +00:00

README.md

Initial commit

2026-05-02 17:01:36 +00:00

tsconfig.json

Extract groombook/api from monorepo with CI workflow

2026-05-11 01:26:56 +00:00

vitest.config.ts

fix: correct vitest alias paths for workspace packages

2026-05-11 01:34:12 +00:00

README.md

api

GroomBook API service (extracted from groombook/app monorepo)