forked from cartsnitch/auth
Coupon Carl
11245744b3
Replace hand-rolled JWT auth with Better-Auth session-based authentication. - Scaffold auth/ Node.js service with Better-Auth, bcrypt password compat, Postgres adapter mapped to existing users table - Add Alembic migration (002) creating sessions, accounts, verifications tables and migrating password hashes to accounts table - Update FastAPI auth dependency to validate sessions via shared DB (supports both cookie and Bearer token) - Remove registration/login/refresh endpoints from API gateway (now handled by Better-Auth service) - Update frontend to use better-auth/react client with httpOnly cookies (no tokens in localStorage or memory) - Rewrite auth store, Login, Register, Dashboard, Settings, ProtectedRoute to use session-based auth - Update all tests to create sessions directly in DB instead of JWT tokens Resolves CAR-27 See plan: CAR-26#document-plan Co-Authored-By: Paperclip <noreply@paperclip.ing>
12 lines
330 B
Bash
12 lines
330 B
Bash
# Required: Generate with `openssl rand -base64 32`
|
|
BETTER_AUTH_SECRET=change-me-in-production-min-32-chars!!
|
|
|
|
# Base URL of the auth service
|
|
BETTER_AUTH_URL=http://localhost:3001
|
|
|
|
# Shared PostgreSQL database
|
|
DATABASE_URL=postgresql://cartsnitch:cartsnitch@localhost:5432/cartsnitch
|
|
|
|
# Port the auth service listens on
|
|
PORT=3001
|