Auth

[lmeireles]

Auth System

• Apply password encryption.
• Define the custom information encrypted in the JWT tokens.
• Apply JWT for user tokens.

Endpoints Auth

• POST /v1/auth/sign_in - Login user into platform and return a JWT token.
• POST /v1/auth/sign_up - Register user into platform and return a JWT token.
• POST /v1/auth/forgot_password - Sends user an email with a recovery link (with token).
• POST /v1/auth/change_password - Update user password with a recovery token.

[lmeireles]

I'm thinking about JWT for the token system.
And using email/password for authentication.

• Password rules
  • Minimum length: 6