auth: user model + password hashing
2 files +28
stack description · add-auth · 3 reviews
Log in with a username and password
acme-pay has no sign-in yet, so every endpoint trusts the caller. This stack adds the user model and password hashing (R22), a POST /login endpoint that checks them (R23), and the login form (R24). R22 and R23 can land on their own; R24 waits on the CSRF fix.