Skip to content

FINERACT-2641: Implement Authentication Feature#16

Merged
Aman-Mittal merged 3 commits into
apache:mainfrom
edk12564:main
Jun 14, 2026
Merged

FINERACT-2641: Implement Authentication Feature#16
Aman-Mittal merged 3 commits into
apache:mainfrom
edk12564:main

Conversation

@edk12564

@edk12564 edk12564 commented Jun 14, 2026

Copy link
Copy Markdown
Contributor

JIRA: FINERACT-2641

Summary

This is the authentication/login feature of fineract-consumer-facing. The goal is to implement the beginnings of a modern consumer frontend auth process with security in mind.

Items implemented:

  1. Login returns an auth JWT to keep user logged in with refresh token for longer term accessibility
  2. 2FA login with an OTP
  3. Device Fingerprinting
  4. ES256 for JWT generation to prevent JWT spoofing and to reuse for open banking later
  5. Dev JWT key generation script
  6. Bcrypt hashed passwords

Detailed Summary:

  • implemented authentication feature
  • used ES256 for asymmetric jwt generation
  • 2FA implemented with OTP
  • refresh tokens implemented
  • device fingerprints checked in login
  • password and username columns added with liquibase
  • refresh token table added with liquibase migration
  • passwords hashed with bcrypt
  • generate jwt key script in PEM format
  • added tests for auth/login feature
  • added more tests for infrastructure, user features

edk12564 added 3 commits June 13, 2026 19:27
- implemented jwt auth
- used ES256 for asymmetric jwt generation
- 2FA implemented with OTP
- device fingerprints checked in login
- password and username columns added
- passwords hashed with bcrypt
- generate jwt key script
- added more tests for infrastructure, user features
- adjusted registration and users features and cucumber tests to match
@Aman-Mittal

Copy link
Copy Markdown
Member

@edk12564 I cannot see swagger specs in this for your apis

@Aman-Mittal Aman-Mittal merged commit 089ee71 into apache:main Jun 14, 2026
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants