P0: tc-auth local sessions, tc-api P0 endpoints, teamclaw-server binary

- tc-auth: argon2id passwords, hashed opaque bearer tokens in auth_sessions (migration 0002), anti-enumeration login errors, redacted token Debug - tc-api: axum router with /healthz, /api/auth/login|logout, /api/user/me, /api/team/{claws,credits,permissions}; Authed bearer extractor + RBAC permission derivation; integration-tested over real TCP vs real Postgres - teamclaw-server: config -> pool -> self-migrate -> serve Co-Authored-By: Claude Fable 5 <[email protected]>
2026-06-09 22:30:33 -05:00
parent 0afb359183
commit c4349bf292
25 changed files with 1257 additions and 0 deletions
@@ -0,0 +1,34 @@
+{
+  "db_name": "PostgreSQL",
+  "query": "SELECT u.id, u.workspace_id, u.role\n             FROM auth_sessions s\n             JOIN users u ON u.id = s.user_id\n             WHERE s.token_hash = $1 AND s.expires_at > now()",
+  "describe": {
+    "columns": [
+      {
+        "ordinal": 0,
+        "name": "id",
+        "type_info": "Uuid"
+      },
+      {
+        "ordinal": 1,
+        "name": "workspace_id",
+        "type_info": "Uuid"
+      },
+      {
+        "ordinal": 2,
+        "name": "role",
+        "type_info": "Text"
+      }
+    ],
+    "parameters": {
+      "Left": [
+        "Text"
+      ]
+    },
+    "nullable": [
+      false,
+      false,
+      false
+    ]
+  },
+  "hash": "900827c5c8c24f4861120e98e3cc8a5b70f22e9f4b4168c9e8eb51c53d68bdae"
+}