EggseCute Cloud

EggseCute Cloud is the hosted API at https://api.eggsecute.net. Production runs serverless on API Gateway + Lambda. Accounts, sessions, and team membership live in DynamoDB. Catalog JSON objects live in S3 under Guid keys.

What it stores

• Accounts and teams — Google identity (and optional email/password for local/dev), sessions, and memberships (owner or member). Personal cannot be shared.
• Catalogs — users/{userId}/… for Personal and teams/{teamId}/… for shared teams.

In the desktop app

Open Sign in and use Continue with Google. The app syncs after catalog changes and when you use Sync. Credentials and run history stay on the computer.

API

• GET /health — liveness check, no auth
• GET /v1/auth/config — public Google OAuth client ID for desktop PKCE
• POST /v1/auth/google — { authorizationCode, codeVerifier, redirectUri } → session (server-side token exchange)
• POST /v1/auth/register — email/password (local/dev)
• POST /v1/auth/login — email/password (local/dev)
• GET /v1/sync — Bearer token, Personal catalog plus membership teams
• PUT /v1/me/catalog — Bearer token, replaces Personal
• POST /v1/teams — create a shared team; caller becomes owner
• GET /v1/teams/{teamId} — team catalog (members only)
• PUT /v1/teams/{teamId} — replace that team catalog (members only)
• GET /v1/teams/{teamId}/members — list members
• POST /v1/teams/{teamId}/members — owner adds an email
• DELETE /v1/teams/{teamId}/members/{userId} — owner removes a member

Google ID tokens are verified against configured OAuth client IDs. Sessions last 30 days. Personal cannot be shared.