Flea Flicker 1f888ac716 security(audit): log owner-bypass reads in GET /pets/:id/profile-summary (GRO-2062) ...

Adds a defense-in-depth audit row to impersonationAuditLogs when the
staff-side owner-bypass path fires. Mirrors the failure-isolation
pattern in src/middleware/portalAudit.ts: insert failures are logged
and swallowed so a working read can never turn into a 500.

- New writeOwnerBypassAudit helper called only when isOwner === true.
- No DB migration; petId + actorStaffId go inside metadata jsonb.
- resolveImpersonationClientId stays pure (no audit side effects).
- Positive + negative tests + a cross-tenant regression test.
- UAT_PLAYBOOK.md §3.19d: TC-API-3.19d documents the audit assertion.

Parent tracking: GRO-2062 (Paperclip).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-02 04:10:58 +00:00

..

__tests__

security(audit): log owner-bypass reads in GET /pets/:id/profile-summary (GRO-2062)

2026-06-02 04:10:58 +00:00

lib

fix(gro-1866): add session-from-auth portal endpoint and role scope

2026-05-28 15:00:15 +00:00

middleware

fix(rbac): port Better-Auth user auto-provision into legacy ./src tree (GRO-2052) (#143)

2026-06-02 02:40:43 +00:00

routes

security(audit): log owner-bypass reads in GET /pets/:id/profile-summary (GRO-2062)

2026-06-02 04:10:58 +00:00

services

Extract groombook/api from monorepo with CI workflow

2026-05-11 01:26:56 +00:00

types

Extract groombook/api from monorepo with CI workflow

2026-05-11 01:26:56 +00:00

index.ts

fix(api): add timeouts for OIDC discovery fetch and DB connection (#66)

2026-05-24 20:11:44 +00:00