Implement local auth (login/session) #5
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Single admin user, bcrypt password hash, signed session cookie. Seed admin credentials from env on first boot. Add
AUTH_MODE=local|oidctoggle (oidc path stubbed, not implemented yet) so switching to Authentik later is config-only. See #12 for the OIDC follow-up.Implemented as part of the initial scaffold commit (main branch) — see linked files in
apps/api/src/apps/web/src. Verifying end-to-end after deploy in #7.