3 commits

Author	SHA1	Message	Date
yisroel	526a1b8f61	implement Logout use case ... thin pass-through to SessionRepository->deleteByToken. test green; 33 tests pass.	2026-05-06 15:16:03 +03:00
yisroel	0697e4af69	implement CreateSession use case ... generates token via injected TokenGenerator, asks Clock for now, sets expiry to now+7d, persists through SessionRepository->create and returns the resulting Session. all 31 tests pass.	2026-05-06 15:15:25 +03:00
yisroel	5b74e9d76a	implement AuthenticateUser use case ... input validation: email + password required. constructs EmailAddress vo (BadRequest on bad format). looks up user; absent or password-mismatch -> UnauthorizedException with constant 'invalid credentials' message (no enumeration leak). password verified through PasswordHasher->verify against stored hash on the User entity (no separate profile lookup -> tide keeps password on the user row). returns the User entity for the caller (typically CreateSession + AuthController). 27 tests pass.	2026-05-06 15:14:34 +03:00