02473bc39e
Add authentication schemas for user registration and login: - UserRegister: email, password (with strength validation), password_confirm - UserLogin: email, password - UserResponse: id, email, created_at, is_active (orm_mode=True) - TokenResponse: access_token, token_type, expires_in - TokenData: user_id, exp Includes field validators for password strength and password confirmation matching. Test coverage: 19 tests for all schemas
956 B
956 B
2026-04-07: Security Services Implementation (T12-T16)
Commits
2fdd9d1feat(security): T12 implement AES-256 encryption service54e8116feat(security): T13 implement bcrypt password hashing781e564feat(security): T14 implement JWT utilities649ff76feat(security): T15 implement API token generationa698d09feat(security): T16 finalize security services exports
Contenuto
Implementazione completa dei servizi di sicurezza con TDD:
- EncryptionService (AES-256-GCM con PBKDF2HMAC)
- Password hashing (bcrypt 12 rounds) con strength validation
- JWT utilities (HS256) con create/decode/verify
- API token generation (SHA-256) con timing-safe comparison
Statistiche
- 70 test passanti
- 100% coverage su tutti i moduli security
- 5 commit atomici seguendo conventional commits
Note
Tutti i test sono stati scritti prima del codice (TDD puro). Ogni servizio ha test per casi di successo, errori, e edge cases.