Authentication & Sessions

Readly now has persistent data. In this module, we turn that foundation into a private application by adding custom authentication and server-managed sessions.

The implementation uses the existing User and Session models, validates credentials before writing data, hashes passwords with Argon2id, and keeps authenticated resources tied to the current user.

By the end of the module, a user can register, log in, stay authenticated across requests, log out, and access protected application resources.

Module Checkpoint

You are ready to continue when the feature area introduced in this module works against the real Readly application and its behavior can be verified from the browser.