📝 docs: add comprehensive user management ADR and technical documentation
Added ADR-0018 for User Management and Authentication System with: - Non-persisted admin user with master password authentication - JWT-based authentication with bcrypt password hashing - PostgreSQL database schema and GORM integration - Admin-assisted password reset workflow - Comprehensive security considerations Added ADR-0019 for BDD Feature Structure: - Epic/User Story organization pattern - Unified development workflow - Source of truth hierarchy Added ADR-0020 for Docker Build Strategy: - Multi-stage build approach - Cache optimization strategy - Production vs development build differences Added technical documentation: - Complete user management system specification - API endpoints and integration details - Security architecture and best practices Generated by Mistral Vibe. Co-Authored-By: Mistral Vibe <vibe@mistral.ai>
This commit is contained in:
@@ -8,7 +8,7 @@ This document clarifies the security-critical aspect of the password reset workf
|
||||
|
||||
## 🎯 Security Principle
|
||||
|
||||
The DanceLessonsCoach password reset system follows a **zero-trust, admin-controlled** security model:
|
||||
The dance-lessons-coach password reset system follows a **zero-trust, admin-controlled** security model:
|
||||
|
||||
```mermaid
|
||||
graph TD
|
||||
@@ -234,4 +234,4 @@ func (s *AuthService) ResetPasswordWithoutAuth(username, newPassword string) err
|
||||
|
||||
---
|
||||
|
||||
*DanceLessonsCoach - Secure by design, private by default 🔒*
|
||||
*dance-lessons-coach - Secure by design, private by default 🔒*
|
||||
@@ -2,7 +2,7 @@
|
||||
|
||||
## Overview
|
||||
|
||||
The DanceLessonsCoach user management and authentication system provides secure user authentication, personalized experiences, and administrative capabilities. This document describes the system architecture, API endpoints, and integration points.
|
||||
The dance-lessons-coach user management and authentication system provides secure user authentication, personalized experiences, and administrative capabilities. This document describes the system architecture, API endpoints, and integration points.
|
||||
|
||||
## Architecture
|
||||
|
||||
|
||||
Reference in New Issue
Block a user