No description
9ca58f3a9d
phase 2: User + Auth foundations. User domain: entity (id, email, passwordHash, isAdmin), dto, repository interface, eloquent + fake impls, users migration, SignupUser use case (validates email, length, uniqueness; hashes password; isAdmin always false on signup). Auth domain: Clock + TokenGenerator + PasswordHasher utility interfaces with system + bcrypt + random impls and matching fakes. Session entity + dto + repository interface, eloquent + fake impls, sessions migration (token primary, fk user_id cascade, expires_at indexed). AuthenticateUser, CreateSession, Logout use cases. AuthMiddleware reads auth_token cookie and attaches User to request attributes. bindings wired in AppServiceProvider + new RepositoryServiceProvider. 37 tests, 59 assertions; stan + cs clean. |
||
|---|---|---|
| ai | ||
| backend | ||
| .envrc | ||
| .gitignore | ||
| AGENTS.md | ||
| flake.lock | ||
| flake.nix | ||
| process-compose.yaml | ||