All notable changes to this project will be documented in this file.
- Security:
- Rate Limiting support using
slowapi. - Protected sensitive endpoints (
/signup,/login,/refresh,/password/reset) from brute-force attacks.
- Rate Limiting support using
- Security:
TrustedHostMiddlewareto prevent Host Header attacks.- Security headers:
X-Frame-Options(Clickjacking protection),X-Content-Type-Options, andX-XSS-Protection.
- Observability:
X-Request-IDmiddleware for request tracking.- Structured JSON logging for production environments.
- Initial release of the Authentication API.
- User signup (
/auth/signup) and login (/auth/login) endpoints. - JWT-based authentication with Bearer tokens.
- Protected user profile endpoints (
/users/me). - Password change and reset functionality.
- Docker support for containerized deployment.
- SQLite support by default, with PostgreSQL configuration available.