Authentication Wizard

An account-password backend system in Java, using Spring Boot that meets the following criteria

• The user can sign up as a new user. They are expected to see an email in their inbox.

• The user can click the link in the email to verify the account.

• The user can log in only after their email address is verified.

• The user cannot create another account with the same email from an existing account.

• A hacker if committing Man-in-the-middle attacks cannot know the plain-text password.

• The database owner (You) cannot store plaintext password or SHA256-hashed password in your DB.

• Fields in the input object must be checked if they are required and if they have the right data types.

Authentication Wizard is hosted on Heroku, uses an in-memory h2 database to persist user login details securely and is tested with Junit5. Its endpoint's are available for testing via Swagger here

Building

1. Clone the repository and navigate to its directory e.g git clone https://github.com/IEnoobong/authentication-wizard .git && authentication-wizard

2. App Uses Java Mail to send verification emails on sign up, so edit missing spring.mail.* and app.support.emai in application .properties else you won't get verification mails

3. Run app mvn spring-boot:run

How to contribute

I'm more than welcome to contributions, If you are willing to contribute to the project feel free to make a fork and submit a pull request. You can hit me up on @IEnoobong

This helped you and you want to buy me Jollof-Rice?

Here's my link https://payme.ng/ienoobong :) Cheers!