503235df3540217c92b667172c80a6423ae99bca
- Add OIDC auto-provision step to resolveStaffMiddleware in rbac.ts: query account table for OAuth provider (authentik/google/github) linked to jwt.sub, if found create groomer staff record with least-privilege defaults - Guard: only auto-provision if OIDC account exists, never superuser/manager - Name derived from jwt.name > email prefix > "Unknown" - Log auto-creation for observability - Add SSO Login Journey (TC-API-1.17 to 1.21) and OOBE Flow (TC-API-1.22 to 1.26) test cases to groombook-api UAT_PLAYBOOK.md §4.1 Updated UAT_PLAYBOOK.md §5.4.1 (SSO Login Journey) and §5.4.2 (OOBE Flow Post-Login) in groombook-web. Co-Authored-By: Paperclip <noreply@paperclip.ing>
GroomBook API
GroomBook API service — extracted from the groombook/app monorepo.
Overview
This repository contains the GroomBook API service, including:
- REST API endpoints
- Database schema and migrations (via Drizzle ORM)
- Authentication (via Better Auth)
- Background job handlers
Structure
src/ # API service source
packages/db/ # Database schema, migrations, and utilities
packages/types/ # Shared TypeScript types
Setup
pnpm install
cp .env.example .env # Fill in required environment variables
pnpm --filter @groombook/api dev
Docker
docker build -t ghcr.io/groombook/api:latest .
docker run -p 3000:3000 ghcr.io/groombook/api:latest
License
AGPL-3.0-only
Description
Languages
TypeScript
99.3%
JavaScript
0.4%
Dockerfile
0.2%