elmeg-demo/.specify/tasks/02_auth_system.md

16 lines
614 B
Markdown

# Task: Authentication System
## Objective
Implement the user authentication system supporting the "Registered User" role and privacy controls.
## Steps
- [ ] Implement OAuth2 flow (Google/GitHub providers for MVP).
- [ ] Create User registration/login API endpoints.
- [ ] Implement JWT token issuance and validation.
- [ ] Create "Identity" model to allow one User to have multiple profiles (pseudonymity).
- [ ] Protect API routes with auth dependencies.
## Acceptance Criteria
- User can sign up and log in.
- Protected routes reject unauthenticated requests.
- User can create a second "Identity" profile.