6 Commits

Author	SHA1	Message	Date
Paul Bailey	0bb293e101	feat: implement list ownership and access control ... - Modified createList to assign ownerId to authenticated user - Updated getLists to filter by user access (owner or collaborator) - Added ownership checks to updateList (owner or editor can update) - Added ownership checks to deleteList (only owner can delete) - Implemented access control for all item operations (create, update, delete, toggle) - Updated getItem, searchItems, and getItemsByFilter to enforce access control - Added dynamic rendering to pages that use authentication - Cascade deletion already handled by database schema (onDelete: Cascade) Requirements: 4.1, 4.2, 4.3, 4.5	2025-12-02 00:48:47 +00:00
Paul Bailey	2ebda95207	feat: implement route protection middleware for authentication ... - Created Next.js middleware for authentication checks - Protected main routes (/, /list/*, /profile/*, /invitations/*) - Redirect unauthenticated users to login with callback URL - Handle session validation and expiration - Allow access to auth pages for unauthenticated users - Redirect authenticated users away from login/register pages - Added comprehensive middleware tests - Validates Requirements 3.3, 3.5 Task: 7. Implement route protection middleware	2025-12-02 00:43:30 +00:00
Paul Bailey	895ceba55f	Implement session management (Task 5) ... - Configure JWT session strategy with 30-day expiration - Implement session validation middleware for route protection - Create logout functionality with session termination - Handle session expiration automatically via JWT - Add session helper functions (getCurrentSession, isAuthenticated) - Protect routes: /, /list/*, /profile/*, /invitations/* - Redirect unauthenticated users to login with callback URL - Requirements: 2.4, 2.5, 3.1, 3.2, 3.4	2025-12-02 00:39:04 +00:00
Paul Bailey	211ed50503	Implement authentication functionality with login server action ... - Created loginUser server action with credential validation - Implemented password verification using bcrypt (via NextAuth authorize) - Session creation on successful login handled by NextAuth - Invalid credentials handled with appropriate error messages - Added comprehensive unit tests for login functionality - All tests passing (11/11) Requirements: 2.1, 2.2	2025-12-02 00:36:03 +00:00
Paul Bailey	70121982a0	feat: implement user registration functionality ... - Created registerUser server action with email/password validation - Implemented password hashing with bcrypt (10 rounds) - Added email uniqueness check to prevent duplicate registrations - Created session after successful registration using NextAuth - Added comprehensive validation for email format and password length (min 8 chars) - Added email and password validation utilities to lib/validation.ts - Removed PrismaAdapter from auth.ts (using JWT sessions only) - Added vitest testing framework and configuration - Created comprehensive unit tests for registration functionality - All tests passing (6/6) Requirements covered: 1.1, 1.2, 1.3, 1.4, 1.5	2025-12-02 00:03:23 +00:00
Paul Bailey	2c3b66b085	feat: set up authentication infrastructure with NextAuth.js v5 ... - Install next-auth@beta, bcryptjs, zod, and @auth/prisma-adapter - Create auth.ts with credentials provider and JWT session strategy - Create auth.config.ts for edge-compatible middleware configuration - Add NextAuth type extensions for session and JWT - Create API route handler for authentication - Configure environment variables for NextAuth - Add AUTH_SETUP.md documentation Task: 1. Set up authentication infrastructure Requirements: 1.1, 2.1	2025-12-01 23:56:45 +00:00