[Backend] Auth System - JWT Authentication #4

Closed
opened 2026-04-06 00:28:51 +02:00 by shoko · 0 comments
Owner

Overview

Implement JWT-based authentication system.

Dependencies

  • Requires Database Models (issue #3) to be completed first

Tasks

  • Create auth router with register, login, logout, me endpoints
  • Implement password hashing with bcrypt
  • Implement JWT token creation and validation
  • Create auth middleware for protected routes
  • Add rate limiting for login attempts
  • Create user settings endpoint

API Endpoints

  • POST /api/auth/register - Create new user
  • POST /api/auth/login - Login, returns JWT
  • POST /api/auth/logout - Logout
  • GET /api/auth/me - Get current user

Security Requirements

  • Passwords must be bcrypt hashed
  • JWT tokens must expire (configurable, default 24h)
  • Protected routes require valid JWT in Authorization header
## Overview Implement JWT-based authentication system. ## Dependencies - Requires **Database Models** (issue #3) to be completed first ## Tasks - [ ] Create auth router with register, login, logout, me endpoints - [ ] Implement password hashing with bcrypt - [ ] Implement JWT token creation and validation - [ ] Create auth middleware for protected routes - [ ] Add rate limiting for login attempts - [ ] Create user settings endpoint ## API Endpoints - POST /api/auth/register - Create new user - POST /api/auth/login - Login, returns JWT - POST /api/auth/logout - Logout - GET /api/auth/me - Get current user ## Security Requirements - Passwords must be bcrypt hashed - JWT tokens must expire (configurable, default 24h) - Protected routes require valid JWT in Authorization header
shoko added this to the Phase 1 - Core MVP milestone 2026-04-06 00:28:51 +02:00
shoko added the backend label 2026-04-06 00:28:51 +02:00
shoko closed this issue 2026-04-08 08:01:24 +02:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: shoko/randebu#4