backend: implement NFC tag payload generation endpoint

[ShantKhatri]

Summary

Product doc section 5.2 specifies NFC tap support — a physical card or badge sticker programmed with the DevCard link. Add a backend endpoint that generates and returns the correct NDEF payload (NFC Data Exchange Format) for a user's DevCard URL so the mobile app can write it to an NFC tag.

Context

This is a post-MVP feature but the backend work is self-contained and maps to apps/backend/src/routes/ as a new nfc.ts route file.

Tasks

• create apps/backend/src/routes/nfc.ts.
• add GET /api/nfc/payload (authenticated) that returns:

  { "type": "URI", "payload": "https://devcard.dev/<username>" }

• add GET /api/nfc/payload?card=<cardId> variant for context card-specific URLs.
• validate that cardId (if provided) belongs to the authenticated user.
• register route in apps/backend/src/app.ts.
• add tests asserting the correct payload structure and ownership check.
• document the endpoint in apps/backend/README.md with a note linking to the ndefjs library the mobile team should use on the client side.

Acceptance Criteria

• endpoint returns correct NDEF-compatible payload.
• card ownership is validated before returning the card-specific URL.
• tests pass.

Difficulty

medium — straightforward route design but requires understanding NDEF URI record structure.

[amritbej]

Hello @ShantKhatri

I’d like to work on this issue. I can implement the NFC payload endpoint, card ownership validation, route registration, tests, and backend documentation for the NDEF-compatible response format.

Please assign it to me. Thanks!

[Midoriya-w]

Hey @ShantKhatri! I'd love to work on this under GSSoC 2026.
The implementation is clear create nfc.ts route with GET /api/nfc/payload that returns the NDEF URI record { "type": "URI", "payload": "https://devcard.dev/" }, add the ?card= variant with ownership validation, register in app.ts, add tests, and document with the ndefjs reference.
Can I get assigned?

[Harxhit]

@Midoriya-w I have assigned this issue to you.

[Midoriya-w]

Hey @Harxhit! Opened PR #189 with the full implementation GET /api/nfc/payload and ?card= variant with ownership validation, registered in app.ts. Ready for review!