User Authentication – Separate Login and Register Pages #3

Closed
opened 2026-05-24 05:25:50 +00:00 by marko · 0 comments
Owner

User Story

As a user, I want separate login and registration pages so that I can securely sign in or create an account, with email validation and a minimum password length of 8 characters.

Acceptance Criteria

  • Separate endpoints are provided:
    • POST /login for authentication.
    • POST /register for new user creation.
  • Email input must be validated using a standard email regular expression.
  • Password must be at least 8 characters; validation enforced on registration.
  • Registration requires confirmation of password; both must match.
  • On successful registration, the user record is stored in the database with a hashed password (e.g., bcrypt).
  • Duplicate email addresses are rejected with an appropriate error message.
  • Invalid email format or short password returns a clear error response to the client.
  • Successful login creates a session or returns a JWT token (implementation detail, but must indicate authentication success).
  • After login, the user is redirected to the job creation flow or dashboard.
  • Authentication flows integrate with the frontend scaffold (/web application) using the appropriate API endpoints.
  • No additional business rules (e.g., email verification) are required per clarification.
## User Story As a user, I want separate login and registration pages so that I can securely sign in or create an account, with email validation and a minimum password length of 8 characters. ## Acceptance Criteria - Separate endpoints are provided: - POST /login for authentication. - POST /register for new user creation. - Email input must be validated using a standard email regular expression. - Password must be at least 8 characters; validation enforced on registration. - Registration requires confirmation of password; both must match. - On successful registration, the user record is stored in the database with a hashed password (e.g., bcrypt). - Duplicate email addresses are rejected with an appropriate error message. - Invalid email format or short password returns a clear error response to the client. - Successful login creates a session or returns a JWT token (implementation detail, but must indicate authentication success). - After login, the user is redirected to the job creation flow or dashboard. - Authentication flows integrate with the frontend scaffold (/web application) using the appropriate API endpoints. - No additional business rules (e.g., email verification) are required per clarification.
marko added this to the (deleted) project 2026-05-24 05:25:50 +00:00
marko changed title from user auth to User Authentication – Separate Login and Register Pages 2026-05-24 05:57:25 +00:00
marko removed this from the (deleted) project 2026-05-26 01:10:07 +00:00
Sign in to join this conversation.
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: HermesFactory/job-tracker#3