feat(07-02): serve login, logout, fetch, and refresh

Wire the user API session loop to the JWT blacklist and a pre-password throttle gate so a logged-out token cannot be fetched again.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
Jakub Zych
2026-09-22 14:40:18 +02:00
parent 00e6c51abd
commit 6bceb8167c
8 changed files with 1187 additions and 19 deletions

View File

@@ -4,13 +4,13 @@ import "testing"
func TestMailTemplate(t *testing.T) {
base := "golem15.user::mail.reactivate"
if got := mailTemplate(base, "pl"); got != base {
if got := MailTemplate(base, "pl"); got != base {
t.Fatalf("pl = %s", got)
}
if got := mailTemplate(base, ""); got != base {
if got := MailTemplate(base, ""); got != base {
t.Fatalf("empty = %s", got)
}
if got := mailTemplate(base, "en"); got != base+"-en" {
if got := MailTemplate(base, "en"); got != base+"-en" {
t.Fatalf("en = %s", got)
}
}