Module overview
The authentication module connects the customer app, NestJS service, and Hasura GraphQL layer with a consistent identity model.
Flows included
- Sign in, sign up, forgot password
- Google OAuth callback
- JWT access and refresh token rotation
- Session persistence in the React app
Security defaults
API routes use guards that validate JWT claims. Hasura permissions map user_id and company_id so tenants never cross streams.
Customization
Swap Google OAuth credentials in apps/service/.env. Add providers by extending the auth module — the session and token infrastructure stays the same.
Try it locally
pnpm dev
Log in with dev@forestbit.co / password123_ on localhost:3001.