fix(GRO-566): add SKIP_OOBE env var to bypass setup wizard #270

Closed
the-dogfather-cto[bot] wants to merge 3 commits from fix/gro-566-skip-oobe into main

3 Commits

Author SHA1 Message Date
Paperclip 00470ad148 feat(GRO-566): add SKIP_OOBE env var to bypass setup wizard
SKIP_OOBE=true|1|yes causes GET /api/setup/status to return
needsSetup: false regardless of DB state. Useful in dev/test
environments where the DB has data but OOBE would block access.

Changes:
- apps/api/src/routes/setup.ts: SKIP_OOBE check in GET /status
- .env.example: document SKIP_OOBE=false
- apps/api/src/__tests__/setup.test.ts: cover SKIP_OOBE=true|1|yes

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-04-12 02:36:17 +00:00
Paperclip 9cce0bc5d9 feat(GRO-565): Better Auth Phase 3 - password change, OIDC discovery, session cleanup, email verification
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-04-12 02:23:44 +00:00
Paperclip 856096a531 fix(GRO-564): remove automatic staff-user email linking
Automatic linking during OOBE login is a security risk - staff records
should only be linked to auth users via explicit admin action using
PATCH /api/staff/:id/link-user.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-04-12 02:14:42 +00:00