elmeg-demo/.specify/tasks/02_auth_system.md

614 B

Task: Authentication System

Objective

Implement the user authentication system supporting the "Registered User" role and privacy controls.

Steps

  • Implement OAuth2 flow (Google/GitHub providers for MVP).
  • Create User registration/login API endpoints.
  • Implement JWT token issuance and validation.
  • Create "Identity" model to allow one User to have multiple profiles (pseudonymity).
  • Protect API routes with auth dependencies.

Acceptance Criteria

  • User can sign up and log in.
  • Protected routes reject unauthenticated requests.
  • User can create a second "Identity" profile.