Login

[geolunalg]

EPIC: Epic: Authentication & Session Management (JWT + Refresh) #2065

Overview

User Story:
As a user, I want to sign in with my credentials so I can access protected features.

Acceptance Criteria:

• Given valid credentials, when I log in, then:
  • backend returns an access token
  • backend sets a refresh token cookie (HttpOnly, Secure, SameSite)
  • response includes user profile basics or client can call /me
• Given invalid credentials, when I log in, then I receive a generic error (no user enumeration).

Resources/Instructions

REPLACE THIS TEXT - If there is a website that has documentation that helps with this issue provide the link(s) here.