Project

General

Profile

Actions
Copy link

Feature #160

open

Epic #3: Implement a secure user authentication system

User Login

Feature #160: User Login

Added by Bricklou 6 months ago. Updated 16 days ago.

Status:
In Review
Priority:
Normal
Assigned To:
Bricklou
Target version:
Server 0.1.0
Start date:
04/13/2026
Due date:
% Done:

100%

Estimated time:
(Total: 0:00 h)

Description

Login page design

Files

clipboard-202604081906-p7srs.png View clipboard-202604081906-p7srs.png 31.3 KB Bricklou, 04/08/2026 05:06 PM

Subtasks 21 (21 open — 0 closed)

User Story #172: As a user, I want to log in with credentials, so that I can access my accountDoneBricklou04/13/2026

Actions
Sub-Task #173: Validate credentials against stored hashDoneBricklou04/13/2026

Actions
Sub-Task #174: Generate and store opaque session token server-sideDoneBricklou04/13/2026

Actions
Sub-Task #175: Set secure session cookieDoneBricklou04/13/2026

Actions
User Story #176: As a user, I want to log in via OAuth/OIDC, so that I can use existing providersDoneBricklou08/30/2026

Actions
Sub-Task #254: Backend: OIDC provider configurationDoneBricklou08/30/2026

Actions
Sub-Task #255: Backend: discovery endpoint for login pageDoneBricklou09/01/2026

Actions
Sub-Task #256: Backend: OIDC endpoints (login start, callback, session)DoneBricklou09/01/2026

Actions
Sub-Task #257: Frontend: OIDC login integrationDoneBricklou09/01/2026

Actions
User Story #237: As a user, I want to log in using a security key (WebAuthn), so that I can use phishing-resistant MFADoneBricklou09/06/2026

Actions
Sub-Task #239: Generate WebAuthn registration challenge and verify attestation (backend)DoneBricklou09/06/2026

Actions
Sub-Task #240: Generate WebAuthn authentication challenge and verify assertion (backend)DoneBricklou09/06/2026

Actions
Sub-Task #241: Store WebAuthn credentials (public key, credential ID, sign count) in the databaseDoneBricklou09/06/2026

Actions
Sub-Task #242: Frontend: WebAuthn credential registration flow in user profileDoneBricklou09/06/2026

Actions
Sub-Task #243: Frontend: WebAuthn assertion flow in MFA login stepDoneBricklou09/06/2026

Actions
User Story #238: As a user, I want to enable and disable TOTP from my profile, so that I can manage my two-factor authentication settingsDoneBricklou08/20/2026

Actions
Sub-Task #244: API endpoint: initiate TOTP setup (generate secret, return base32 + otpauth URL)DoneBricklou08/20/2026

Actions
Sub-Task #245: API endpoint: confirm and activate TOTP (verify OTP code before persisting secret)DoneBricklou08/27/2026

Actions
Sub-Task #247: API endpoint: disable TOTP (requires current OTP code or password confirmation)DoneBricklou08/20/2026

Actions
Sub-Task #248: Frontend: TOTP setup wizard (QR code display, manual entry, confirmation code input)DoneBricklou08/27/2026

Actions
Sub-Task #249: Frontend: MFA management section in user profile (enable/disable/status)DoneBricklou08/27/2026

Actions

Updated by Bricklou 6 months ago Author Actions
Copy link
 #1

  • Subtask #172 added

Updated by Bricklou 6 months ago Author Actions
Copy link
 #2

  • Subtask #176 added

Updated by Bricklou 6 months ago Author Actions
Copy link
 #3

clipboard-202604081906-p7srs.png

Updated by Bricklou 6 months ago Author Actions
Copy link
 #4

  • Status changed from Draft to To Do

Updated by Bricklou 6 months ago Author Actions
Copy link
 #5

  • Status changed from To Do to Planned
  • Assigned To set to Bricklou

Updated by Bricklou about 1 month ago Author Actions
Copy link
 #6

  • Subtask #237 added

Updated by Bricklou about 1 month ago Author Actions
Copy link
 #7

  • Subtask #238 added

Updated by Bricklou about 1 month ago Author Actions
Copy link
 #8

  • Status changed from Planned to In Progress

Updated by Bricklou 16 days ago Author Actions
Copy link
 #9

  • Target version set to Server 0.1.0

Updated by Bricklou 16 days ago Author Actions
Copy link
 #10

  • Status changed from In Progress to In Review
Actions
Copy link

Also available in: PDF Atom

Go to top