9dc0586d67
✅ Implemented: - Password hashing with bcrypt (salt rounds = 10) - JWT token generation (access 15m, refresh 7d) - Updated login endpoint to return access + refresh tokens - Added refresh and logout endpoints - Updated seed script with hashed passwords - Added test users for all roles (OWNER, MANAGER, GROWER, STAFF) 📝 Files Added/Modified: - backend/src/utils/password.ts (NEW) - backend/src/utils/jwt.ts (NEW) - backend/src/controllers/auth.controller.ts (UPDATED) - backend/src/routes/auth.routes.ts (UPDATED) - backend/prisma/seed.js (UPDATED - now hashes passwords) - CREDENTIALS.md (UPDATED - all test users documented) 🔐 Test Users: - admin@runfoo.run (OWNER) - manager@runfoo.run (MANAGER) - grower@runfoo.run (GROWER) - staff@runfoo.run (STAFF) All passwords: password123 ⏭️ Next: Auth middleware + RBAC
9 lines
318 B
TypeScript
9 lines
318 B
TypeScript
import { FastifyInstance } from 'fastify';
|
|
import { login, refresh, logout, me } from '../controllers/auth.controller';
|
|
|
|
export async function authRoutes(server: FastifyInstance) {
|
|
server.post('/login', login);
|
|
server.post('/refresh', refresh);
|
|
server.post('/logout', logout);
|
|
server.get('/me', me);
|
|
}
|