One Club, getting Publicis running together

A project for Publicis Groupe, born during my apprenticeship at Publicis Sapient. The goal was to bring employees together around shared sports goals. You link your Strava or Garmin account, activities come in by themselves, become points, feed individual and team rankings, and a social feed keeps the club alive.

The guiding idea is that the collective is the point. Individual points push team and club gauges forward, and their tiers unlock rewards for everyone.

Sign-in uses the company's Microsoft account, with OpenID Connect and PKCE. The application never sees the password, checks the token's signature, issuer, audience, expiry and tenant, then issues its own 8-hour session. No Microsoft token is kept.

One points rule per sport, editable by administrators. 100 points per kilometre run, 40 cycling, 400 swimming, 50 walking, and time-based for hiking, strength, yoga and crossfit. On a webhook, the server calls the API back rather than trusting the payload, and every activity is deduplicated so a repeated sync never doubles the points.

Personal events, which anyone can create, earn no points, and the server enforces that whatever the client sends. It rules out cheating and avoids moderation.

Flutter for mobile, React for the web, NestJS for the API, and nothing flowing into Publicis' information system. It's a proof of concept, presented as one, with what remains to be wired in, including the SSO still waiting for the Azure identifiers from IT.