Admin Authentication System (BACKEND)

[emmanuelAkpe]

Story

As an admin, I need to securely access the system to manage curriculum content.

Objective

Set up a secure admin user model to store and authenticate admin credentials.

Requirements

Admin User Model (Backend)

• Fields:
  • email
  • password
  • role (Admin, Super Admin)
• Security:
  • Password encryption (bcrypt, salting)
  • Unique email validation
  • Required field validation
  • Error handling implementation

Authentication Endpoints (Backend)

• Required Endpoints:

  • POST admin/auth/login - Authenticate admin and initiate session
  • POST admin/auth/register -Create Admin
  • POST admin/auth/logout - End admin session

• Features:

  • Secure session management (cookies/JWT)
  • Email verification for password reset

Acceptance Criteria

• [ ] Admin user model created with all required fields
• [ ] Password encryption implemented and tested
• [ ] Authentication endpoints functional
• [ ] Error handling covers all cases

Technical Notes

• Use bcrypt
• Add CSRF protection

[Perp-pexel]

I will handle this

[emmanuelAkpe]

great, its assigned to you