|
|
98156d1e49
|
Phase 3.4: client_app self-managed auth cutover
Rips firebase_auth; auth talks directly to the new backend endpoints.
Anonymous-first + phone OTP work end-to-end; Google/Apple SDKs are kept
but buttons are hidden behind ENABLE_SOCIAL_AUTH until backend OAuth
credentials are provisioned.
Smoke-tested against the backend via curl:
- anonymous → PATCH display_name → /me
- OTP request (read stub code from backend log) → verify with
anonymous_customer_id → same customer row preserved, display_name
preserved, phone added → upgrade confirmed
- refresh rotation + logout → post-logout refresh correctly fails
REFRESH_INVALID
- Debug APK builds clean
- pubspec: drop firebase_auth; add flutter_secure_storage
- core/auth/auth_bridge.dart: shared mutable state (access token +
refresh callback + in-flight de-dup) — keepAlive provider
- core/auth/token_storage.dart: flutter_secure_storage wrapper
(customer_refresh_token key)
- core/auth/social_auth_enabled.dart: const flag from
--dart-define=ENABLE_SOCIAL_AUTH (default false)
- core/auth/auth_notifier.dart: bootstrap via stored refresh; anonymous
via /api/shared/auth/anonymous + PATCH display_name; phone OTP via
/api/client/auth/*; Google + Apple wired (passes anonymous_customer_id
for upgrade); anonymity config check for ForceRegister state; granular
error-code mapping
- core/api/api_client.dart: Bearer from bridge + postRaw(skipAuth) for
auth endpoints + single-retry 401 refresh
- core/chat/chat_notifier.dart + core/pairing/pairing_notifier.dart: WS
auth frame reads bridge.accessToken
- features/auth/screens/otp_screen.dart: verificationId → otpRequestId
- features/auth/screens/register_screen.dart + force_register_screen.dart:
Google/Apple buttons gated behind kSocialAuthEnabled; force_register
drops obsolete linkAccount() (upgrade happens server-side now via
anonymous_customer_id)
- client_app/CLAUDE.md: Auth section rewritten (was stale on Firebase)
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
|
2026-04-24 16:08:20 +08:00 |
|
|
|
a7a2a32d27
|
Phase 1 scaffold: auth for all apps
- Backend: Fastify with two listeners (public + internal), routes, services, DB migration + seed
- client_app: Flutter with BLoC, all auth screens (welcome, display name, register, OTP, force-register)
- mitra_app: Flutter with BLoC, OTP-only login
- control_center: React + Vite, email/password login, mitra/user management, anonymity settings
- Docs: phase1 plan, API contract, client app mockup
- CLAUDE.md and shared memory for all subprojects
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
|
2026-04-05 10:08:42 +08:00 |
|
