ISSUE-001: Auto-verify email on registration
- Set IsVerified: true in Register() to allow immediate login
- Removes blocking email verification requirement for MVP
ISSUE-002: Generate tokens in Register
- Modified Register() signature to return (*User, *TokenPair, error)
- Added JWT token generation after user creation
- Store refresh token in database
- Updated handlers to use returned tokens
- Added nil checks for JWTService and refreshTokenService
Changes:
- veza-backend-api/internal/core/auth/service.go
- veza-backend-api/internal/handlers/auth.go
- veza-backend-api/internal/core/auth/handler.go
- REAL_ISSUES_TODOLIST.json
Note: Backend needs to be recompiled and restarted for changes to take effect.
- Created comprehensive E2E tests for critical user flows
- Added 3 complete end-to-end test scenarios:
1. Complete user journey (Login → Upload → Create Playlist)
2. Login → Create Playlist (no upload)
3. Login → Upload Track (no playlist)
Tests use Playwright and cover the most critical user journeys.
Tests require development server to be running (npm run dev).
Phase: PHASE-5
Priority: P2
Progress: 249/267 (93.26%)
- Verified RequireOwnershipOrAdmin middleware is correctly applied to PUT /users/:id
- Added integration tests for ownership verification
- Test: user cannot update another user's profile (403 Forbidden)
- Test: admin can update any profile (200 OK)
- Test: user can update own profile (200 OK)
- All tests pass
Phase: PHASE-1
Priority: P0
Progress: 1/267 (0.4%)
