Skip to content

Authentication

Audience: domain, product
Status: specced
Owns: product + backend
Depends on: Orchestrator, Domain — User

  • Create account, verify account, forgot password, reset password.
  • Verification uses OTP (not email magic links).
  • Sign-in: password and Google (Gmail).
  • Shared auth/JWT issuance is intended to live in the Orchestrator; CAP consumes the same JWT.