5 commits

Author	SHA1	Message	Date
Yisroel Baum	e54197f8a5	implement auth controller ... Green phase: AuthController handles login (authenticate + create session + set cookie), logout (delete session + clear cookie), and me (return user from request attribute).	2026-05-17 09:45:25 +03:00
Yisroel Baum	b581e80413	implement auth middleware ... Green phase: PSR-15 AuthMiddleware checks auth_token cookie, looks up session, validates expiry, sets user attribute on request or returns 401.	2026-05-17 09:45:25 +03:00
Yisroel Baum	58772d66c1	implement logout use case ... Green phase: Logout calls deleteByToken on SessionRepository. No-op for non-existent tokens.	2026-05-17 09:45:24 +03:00
Yisroel Baum	d490260807	implement create session use case ... Green phase: CreateSession generates a token, creates a session with 7-day expiry, and persists it via SessionRepository.	2026-05-17 09:45:23 +03:00
Yisroel Baum	b14cd565bb	implement authenticate user use case ... Green phase: AuthenticateUser validates credentials, throws BadRequestException for empty fields, UnauthorizedException for unknown email or wrong password.	2026-05-17 09:45:23 +03:00