[0.1.0] - 2025-05-11
Added
-
Core Authentication API:
-
User registration (
/api/v1/auth/register) with email and password. -
Secure password hashing.
-
User login (
/api/v1/auth/login) returning JWT. -
JWT generation and validation.
-
Protected endpoint (
/api/v1/auth/me) to retrieve authenticated user's details. -
Pydantic models for request/response validation.
-
SQLAlchemy models for database interaction.
-
Database setup with PostgreSQL.
-
Alembic for database migrations.
-
FastAPI application setup with basic routing.
-
Core dependencies added to
pyproject.toml.
-
-
Security Enhancements:
- Rate limiting implemented for
/api/v1/auth/register(5/minute) and/api/v1/auth/login(10/minute) endpoints to prevent brute-force and DoS attacks.
- Rate limiting implemented for
Security
-
Implemented rate limiting on authentication endpoints.
-
Password hashing.
-
JWTs for session management.