829d365e80
Add complete auth backend (Workstream D): - Auth middleware for session/API key authentication - Signup with password or passkey (WebAuthn) - Login flow with device trust and email confirmation - Password reset and email verification - Session management and logout Utilities created: - cookies.ts: Cookie helpers and configuration - crypto.ts: Token generation and hashing - password.ts: zxcvbn validation, argon2id hashing - geo.ts: IP/location extraction from headers - email.ts: Stubbed email sending - session.ts: Session creation and device trust Code review improvements applied: - Use ORPCError instead of Error in procedures - Add ast-grep rule to enforce ORPCError usage - Remove error info leakage (generic messages) - Optimize N+1 query with JOIN in login-password - Extract signupWithPassword/signupWithPasskey for testability - Add 15-minute WebAuthn challenge expiry check - Strengthen CookieOptions type definitions Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Reviq Publisher Dashboard
Setup
Prerequisites
- devenv for development environment management
Environment Variables
Copy .env.dev to .env for local development:
cp .env.dev .env
| Variable | Description |
|---|---|
DATABASE_URL |
PostgreSQL connection string |
Development
Start the development environment:
devenv up
This starts:
- PostgreSQL database
- Publisher dashboard dev server (port 6827)
- Package build watcher
The database is automatically initialized with:
- Database:
reviq-dashboard - User:
reviq - Password:
reviq