hamid 3a51305343 backend phase 2: identity — phone-OTP auth, sessions & roles (REST) ...

- six REST endpoints (auth/request_otp, verify_otp, refresh, logout, me,
  me/select_role) wrapping the existing JWE/TOTP/RBAC engine
- usr.UserSessions with refresh-token rotation + stolen-token (replay)
  detection → revoke-all + 401; logout rotates the security stamp
- users extended: gender, national_id (enc, NULL until KYC),
  shahkar_verified_at (auto-reset on phone change), phone_hash UNIQUE,
  is_active, deleted_at + soft-delete filter; phone/email/national_id
  encrypted at rest via IFieldEncryptor value converter
- user_roles grant/revoke audit trail + global revoked filter; 7 roles
  seeded; admin sub-roles never self-assignable (403)
- ISmsSender seam (mock logs the OTP code) replaces the TODO log lines
- OperationResult/BaseController learned enveloped 401/403
- auth knobs as platform_configs rows (resend/attempts/session TTL)
- migration IdentitySessionsAndUserExtensions applied to the dev DB
- 24 new tests incl. Baya.Test.Api (WebApplicationFactory over SQLite);
  47 total green, zero new build warnings; swagger snapshot + contract
  (identity-auth.md), handoff, report, mocks-registry updated

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-02 02:34:11 +03:30

..

01-actors-and-onboarding.html

backend phase 2: identity — phone-OTP auth, sessions & roles (REST)

2026-07-02 02:34:11 +03:30

01-actors-and-onboarding.md

backend phase 2: identity — phone-OTP auth, sessions & roles (REST)

2026-07-02 02:34:11 +03:30

02-nurse-verification.html

clean and refine product docs structure

2026-06-24 01:32:46 +03:30

02-nurse-verification.md

clean and refine product docs structure

2026-06-24 01:32:46 +03:30

03-service-catalog-and-pricing.html

clean and refine product docs structure

2026-06-24 01:32:46 +03:30

03-service-catalog-and-pricing.md

clean and refine product docs structure

2026-06-24 01:32:46 +03:30

04-search-and-matching.html

clean and refine product docs structure

2026-06-24 01:32:46 +03:30

04-search-and-matching.md

clean and refine product docs structure

2026-06-24 01:32:46 +03:30

05-booking-and-scheduling.html

clean and refine product docs structure

2026-06-24 01:32:46 +03:30

05-booking-and-scheduling.md

clean and refine product docs structure

2026-06-24 01:32:46 +03:30

06-evv-and-service-delivery.html

clean and refine product docs structure

2026-06-24 01:32:46 +03:30

06-evv-and-service-delivery.md

clean and refine product docs structure

2026-06-24 01:32:46 +03:30

07-cancellation-and-refunds.html

clean and refine product docs structure

2026-06-24 01:32:46 +03:30

07-cancellation-and-refunds.md

clean and refine product docs structure

2026-06-24 01:32:46 +03:30

08-payments-and-escrow.html

clean and refine product docs structure

2026-06-24 01:32:46 +03:30

08-payments-and-escrow.md

clean and refine product docs structure

2026-06-24 01:32:46 +03:30

09-installments-bnpl.html

clean and refine product docs structure

2026-06-24 01:32:46 +03:30

09-installments-bnpl.md

clean and refine product docs structure

2026-06-24 01:32:46 +03:30

10-payouts.html

clean and refine product docs structure

2026-06-24 01:32:46 +03:30

10-payouts.md

clean and refine product docs structure

2026-06-24 01:32:46 +03:30

11-reviews-trust-and-safety.html

clean and refine product docs structure

2026-06-24 01:32:46 +03:30

11-reviews-trust-and-safety.md

clean and refine product docs structure

2026-06-24 01:32:46 +03:30

12-messaging-and-emergencies.html

clean and refine product docs structure

2026-06-24 01:32:46 +03:30

12-messaging-and-emergencies.md

clean and refine product docs structure

2026-06-24 01:32:46 +03:30

13-tax-invoicing-and-legal.html

clean and refine product docs structure

2026-06-24 01:32:46 +03:30

13-tax-invoicing-and-legal.md

clean and refine product docs structure

2026-06-24 01:32:46 +03:30

14-notifications-and-admin.html

clean and refine product docs structure

2026-06-24 01:32:46 +03:30

14-notifications-and-admin.md

clean and refine product docs structure

2026-06-24 01:32:46 +03:30

index.html

clean and refine product docs structure

2026-06-24 01:32:46 +03:30

index.md

clean and refine product docs structure

2026-06-24 01:32:46 +03:30