5 Commits

Author	SHA1	Message	Date
Michael Wolf	d921679058	Rework user types: create AuthenticatedUser and AnonymousUser class ... Both are subclasses of an abstract User class which contains almost everything interesting.	2026-01-17 17:45:36 -06:00
Michael Wolf	c7b8cd33da	Clean up imports	2026-01-10 08:54:34 -06:00
Michael Wolf	6c0895de07	Fix formatting	2026-01-10 08:51:20 -06:00
Michael Wolf	ad6d405206	Add session data to Call type ... - AuthService.validateRequest now returns AuthResult with both user and session - Call type includes session: SessionData | null - Handlers can access session metadata (createdAt, authMethod, etc.) 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-04 09:50:05 -06:00
Michael Wolf	c246e0384f	Add authentication system with session-based auth ... Implements full auth flows with opaque tokens (not JWT) for easy revocation: - Login/logout with cookie or bearer token support - Registration with email verification - Password reset with one-time tokens - scrypt password hashing (no external deps) New files in express/auth/: - token.ts: 256-bit token generation, SHA-256 hashing - password.ts: scrypt hashing with timing-safe verification - types.ts: Session schemas, token types, input validation - store.ts: AuthStore interface + InMemoryAuthStore - service.ts: AuthService with all auth operations - routes.ts: 6 auth endpoints Modified: - types.ts: Added user field to Call, requireAuth/requirePermission helpers - app.ts: JSON body parsing, populates call.user, handles auth errors - services.ts: Added services.auth - routes.ts: Includes auth routes 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-01-03 13:59:02 -06:00