16 lines
876 B
Markdown
16 lines
876 B
Markdown
---
|
|
id: "6df36ec4-94cd-438b-a2ee-10c022f6848a"
|
|
number: 48
|
|
title: "[Server] Auth comptes utilisateurs et tokens API"
|
|
status: "qa"
|
|
priority: "low"
|
|
sprint: null
|
|
links: [{"target":"#46","kind":"relatesTo"},{"target":"#47","kind":"dependsOn"}]
|
|
agentRefs: []
|
|
createdBy: {"kind":"agent","agent_id":"f8f40941-ecf7-4830-b9de-8818a099f448"}
|
|
updatedBy: {"kind":"agent","agent_id":"57695b92-24d0-4876-837c-76116e70a6ae"}
|
|
createdAt: 1784411990980
|
|
updatedAt: 1784448980586
|
|
version: 4
|
|
---
|
|
Implémenter le domaine serveur `UserAccount` et `AuthSession` : création de compte, connexion, hash de mot de passe Argon2id ou bcrypt, émission de tokens d'accès + refresh tokens, middleware d'auth API, révocation/logout. Stockage PostgreSQL. Endpoints attendus : `POST /auth/register`, `POST /auth/login`, `POST /auth/refresh`, `POST /auth/logout`, `GET /me`. Aucun écran client dans ce ticket. |