- Tabela `profiles` + coluna `profile_id` em todas as entidades
(categories, transactions, recurring_expenses, accounts, player_profile,
xp_events, player_quests, player_achievements, player_cosmetics)
- Dados existentes migrados para profile_id = 1 (Manoel)
- CLI `./api create-user --name <n> --password <p>` cria perfil com
seed de categorias e player_profile; faz upsert de senha se já existir
- Auth substituída: cookie+APP_PASSWORD → JWT Bearer 24h (HS256)
- Middleware RequireAuth injeta profile_id no context de todas as rotas
- Todos os repositórios filtram por profile_id do context
- Endpoints: POST /api/auth/login, GET /api/auth/me,
POST /api/auth/change-password, POST /api/logout
- Frontend: auth store usa localStorage (fc_token/fc_profile),
api.ts envia Authorization header, LoginView usa campo name
- SettingsView reescrita com troca de senha e logout
- docker-compose.yml: remove APP_USERNAME/APP_PASSWORD, adiciona JWT_SECRET
Co-Authored-By: Claude Sonnet 4.6 <[email protected]>
Tokens assinados com APP_PASSWORD via HMAC-SHA256 eliminam o in-memory
sessions map. Também corrige env vars (_USERNAME→APP_USERNAME).
Co-Authored-By: Claude Sonnet 4.6 <[email protected]>
- Go: middleware RequireAuth protege todas as rotas /api/*
- Go: POST /api/login valida APP_USERNAME/APP_PASSWORD e emite cookie HttpOnly 30 dias
- Go: GET /api/auth/me e POST /api/logout
- Vue: LoginView com design Arcade Neon
- Vue: router guard redireciona para /login se não autenticado
- Vue: api.ts redireciona para /login em qualquer 401
- docker-compose: APP_USERNAME e APP_PASSWORD como env vars
Co-Authored-By: Claude Sonnet 4.6 <[email protected]>
Mlcavalho1andClaude Sonnet 4.6