📝 docs: add comprehensive user management ADR and technical documentation

Added ADR-0018 for User Management and Authentication System with:
- Non-persisted admin user with master password authentication
- JWT-based authentication with bcrypt password hashing
- PostgreSQL database schema and GORM integration
- Admin-assisted password reset workflow
- Comprehensive security considerations

Added ADR-0019 for BDD Feature Structure:
- Epic/User Story organization pattern
- Unified development workflow
- Source of truth hierarchy

Added ADR-0020 for Docker Build Strategy:
- Multi-stage build approach
- Cache optimization strategy
- Production vs development build differences

Added technical documentation:
- Complete user management system specification
- API endpoints and integration details
- Security architecture and best practices

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <vibe@mistral.ai>
This commit is contained in:
2026-04-09 00:25:35 +02:00
parent 10c909581c
commit 69e7c44eb2
6 changed files with 1207 additions and 7 deletions

View File

@@ -8,7 +8,7 @@ This document clarifies the security-critical aspect of the password reset workf
## 🎯 Security Principle
The DanceLessonsCoach password reset system follows a **zero-trust, admin-controlled** security model:
The dance-lessons-coach password reset system follows a **zero-trust, admin-controlled** security model:
```mermaid
graph TD
@@ -234,4 +234,4 @@ func (s *AuthService) ResetPasswordWithoutAuth(username, newPassword string) err
---
*DanceLessonsCoach - Secure by design, private by default 🔒*
*dance-lessons-coach - Secure by design, private by default 🔒*

View File

@@ -2,7 +2,7 @@
## Overview
The DanceLessonsCoach user management and authentication system provides secure user authentication, personalized experiences, and administrative capabilities. This document describes the system architecture, API endpoints, and integration points.
The dance-lessons-coach user management and authentication system provides secure user authentication, personalized experiences, and administrative capabilities. This document describes the system architecture, API endpoints, and integration points.
## Architecture