Files
HealthLog/src/app/api/onboarding
Marc-André Bombeck 4849ac7634 feat(api): add POST /api/onboarding/step for wizard progression
Persists per-step progress with strict order enforcement: submitted
step must equal current+1, step 4 flips onboardingCompletedAt and
clears the hl_onboarding proxy cookie. Re-reads the fresh User row to
defend against tab-race conditions, audit-logs every transition, and
caps writes at 30 per 10 min per user to defang stuck-retry loops.

409 on out-of-order, 409 on already-completed, 422 on payload
validation failure, 429 on rate limit.
2026-05-14 19:39:42 +02:00
..