Authentication Feature

What It Does

Provides user authentication and session management for Jubiloop. Users can sign up, sign in, and maintain secure sessions with organization/workspace support built in.

Key Capabilities

• User Registration: Create accounts with email/password
• Sign In/Out: Session-based authentication with secure cookies
• Session Management: Secure sessions that last seven days and refresh with activity
• Organization Context: Maintain and switch the active workspace
• Password Recovery: Request a time-limited reset link and choose a new password
• Connected Experience: One session supports the Jubiloop web experience

User Experience

1. Sign Up: User provides name, email, password → account created → session established
2. Sign In: User enters email/password → session created → redirected to app
3. Organization Context: Users can switch between multiple organization workspaces
4. Password Recovery: Users can request a reset link and choose a new password
5. Session Persistence: Sessions last 7 days and refresh after 1 day of age

Current Boundaries

• Accounts use email and password; social sign-in is not currently offered.
• Email verification is not required before first sign-in.
• Password recovery uses a time-limited reset link.
• Better Auth provides backend support for organization roles, invitations, members, and teams. Complete management screens belong to the organization feature roadmap.