bvandeusen 2f2dfa86df feat(api): POST /api/auth/login ...

Verifies bcrypt password hash, mints a session token, stores its
sha256 in the sessions table, and returns the token in both the
response body (for Flutter) and an httpOnly/SameSite=Strict
cookie (for the web SPA).

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-04-20 21:25:52 -04:00

..

api.go

feat(api): POST /api/auth/login

2026-04-20 21:25:52 -04:00

auth_test.go

feat(api): POST /api/auth/login

2026-04-20 21:25:52 -04:00

auth.go

feat(api): POST /api/auth/login

2026-04-20 21:25:52 -04:00

errors_test.go

feat(api): package skeleton + error envelope

2026-04-20 20:57:09 -04:00

errors.go

feat(api): package skeleton + error envelope

2026-04-20 20:57:09 -04:00

types.go

feat(api): POST /api/auth/login

2026-04-20 21:25:52 -04:00