3 commits

Author	SHA1	Message	Date
fullsizemalt	9dc0586d67	feat: Sprint 2 Phase 1 - Auth Core Complete ... ✅ Implemented: - Password hashing with bcrypt (salt rounds = 10) - JWT token generation (access 15m, refresh 7d) - Updated login endpoint to return access + refresh tokens - Added refresh and logout endpoints - Updated seed script with hashed passwords - Added test users for all roles (OWNER, MANAGER, GROWER, STAFF) 📝 Files Added/Modified: - backend/src/utils/password.ts (NEW) - backend/src/utils/jwt.ts (NEW) - backend/src/controllers/auth.controller.ts (UPDATED) - backend/src/routes/auth.routes.ts (UPDATED) - backend/prisma/seed.js (UPDATED - now hashes passwords) - CREDENTIALS.md (UPDATED - all test users documented) 🔐 Test Users: - admin@runfoo.run (OWNER) - manager@runfoo.run (MANAGER) - grower@runfoo.run (GROWER) - staff@runfoo.run (STAFF) All passwords: password123 ⏭️ Next: Auth middleware + RBAC	2025-12-09 13:52:54 -08:00
fullsizemalt	a9ffd1d5ca	fix: Correct email domain from .com to .run ... - Updated seed script: admin@runfoo.com → admin@runfoo.run - Updated all documentation to reflect correct email - Need to re-seed database on deployment	2025-12-09 13:46:25 -08:00
fullsizemalt	d2c3e67e40	fix: Change health check from curl to wget for alpine compatibility ... - Backend container uses node:20-alpine which doesn't include curl - wget is available by default in alpine - Health check endpoint is working, just the command was wrong - Also added Sprint 1 documentation and credentials file	2025-12-09 13:39:43 -08:00