# dashback

Backend API for Dash — Google SSO auth, MSSQL allowlist, and session cookies.

## Setup

```bash
cp .env.example .env
npm install
```

Configure `.env` (see `.env.example`). Required for auth: `GOOGLE_CLIENT_ID`, `JWT_SECRET`, and `CORS_ORIGINS`.

## Run

```bash
npm start
```

Default port: `4208`.

## API

See [docs/api](docs/api/README.md) for endpoints, auth flow, and frontend integration.

Docs are generated from `@openapi` JSDoc on route handlers:

```bash
npm run docs:api
```

That writes `docs/api/openapi.json` and per-route Markdown under `docs/api/routes/`.

## Users

Manage the email allowlist:

```bash
npm run manage-users
```