feat: password auth + session tokens + user invite#18

Merged

ori129 merged 16 commits intomainfrom

feat/password-auth

Mar 15, 2026

Commits on Mar 15, 2026

feat: add password_hash/password_temp to workspace_users, add login_sessions table
ori129
committed
feat: add bcrypt auth helpers and updated schemas
ori129
committed
feat: password auth endpoints — register, login, /me, logout, change-password, reset-password
ori129
committed
test: add backend auth test suite (T1-T20)
ori129
committed
feat: frontend auth — session tokens, Bearer header, two-step login context
ori129
committed
feat: auth screens — password fields, two-step login, ForceChangePassword gate
ori129
committed
feat: Users panel — reset password button and promote-to-leader modal
ori129
committed
chore: pre-existing changes — README update, admin reset fix, TODOS, misc cleanup
ori129
committed
chore: add TODOS.md and tsconfig.tsbuildinfo to .gitignore
ori129
committed
feat: admin invite user — create users without Compliance API import
ori129
committed
fix: resolve ruff lint errors (unused imports, unused variable, bare f-strings)

ori129
and
claude
committed
fix: remaining ruff lint errors — pipeline f-strings and test unused imports

ori129
and
claude
committed
fix: apply ruff formatting to all backend files

ori129
and
claude
committed
fix: add missing auth_deps.py to repo and pytest-asyncio to CI

ori129
and
claude
committed
fix: add postgres+pgvector service to CI for test suite

ori129
and
claude
committed
fix: enable pgvector extension before create_all in test conftest

ori129
and
claude
committed