7 Commits

Author	SHA1	Message	Date
Xiaoxia AI	1aa111ffd2	feat(auth): add password reset functionality ... - Implement RequestPasswordResetUseCase to generate reset token - Send password reset email with 1-hour expiration - Implement ResetPasswordUseCase to verify token and update password - Security: return success even if user not exists (avoid enumeration) - Validate new password strength before reset - Clear reset token after successful password change - Add 9 comprehensive unit tests (all passed) Phase 4 Task 8/68 completed	2026-06-17 01:25:53 +08:00
Xiaoxia AI	651bbd0142	feat(auth): add login, logout and refresh token use cases ... - Implement LoginUseCase with password verification and JWT token generation - Generate user_auth token (without workspace) for initial login - Create session with refresh_token in Redis - Track last_login_at and last_login_ip - Implement LogoutUseCase for single device or all devices - Add RefreshTokenUseCase placeholder (to be implemented) - Add 9 comprehensive unit tests (all passed) Phase 4 Task 7/68 completed	2026-06-17 01:24:45 +08:00
Xiaoxia AI	424327c762	feat(auth): add user registration with email verification ... - Implement RegisterUserUseCase with password validation and email verification - Implement VerifyEmailUseCase for email confirmation - Add UserRepository interface and InMemoryUserRepository implementation - Support duplicate email/username checking - Generate verification tokens and send verification emails - Add 9 comprehensive unit tests (all passed) Phase 4 Task 6/68 completed	2026-06-17 01:20:40 +08:00
Xiaoxia AI	c72be74727	feat(auth): add email service with SMTP support ... - Implement EmailService class with configurable SMTP - Support verification/password-reset/invitation email templates - Support HTML and plain text fallback - Support CC/BCC recipients - Add 8 comprehensive unit tests with Mock SMTP (all passed) Phase 4 Task 4/68 completed	2026-06-17 01:17:19 +08:00
Xiaoxia AI	402a767d33	feat(auth): add Redis session store for refresh tokens ... - Implement SessionStore class with Redis backend - Support save/get/delete session and refresh_token - Support user multi-device sessions management - Add last_active tracking and force logout all devices - Add 10 comprehensive unit tests with Mock Redis (all passed) - Install redis dependency Phase 4 Task 3/68 completed	2026-06-17 01:15:08 +08:00
Xiaoxia AI	16f715a1e0	feat(auth): add bcrypt password hasher with strength validator ... - Implement PasswordHasher class with bcrypt (cost=12) - Add PasswordValidator for password strength checking - Support min length, uppercase, lowercase, digit, special chars - Add 18 comprehensive unit tests (all passed) - Install bcrypt dependency Phase 4 Task 2/68 completed	2026-06-17 01:08:10 +08:00
Xiaoxia AI	e344fe2e9e	feat(auth): add JWT service with sign/verify/refresh functionality ... - Implement JWTService class with access_token and refresh_token support - Add token type validation (access vs refresh) - Add comprehensive unit tests (9 tests all passed) - Install PyJWT dependency Phase 4 Task 1/68 completed	2026-06-17 01:01:22 +08:00