Authentication & Billing

JWT Authentication Flow

Registration Flow

Client → POST /api/auth/register { email, password, name }
Server → hash password (bcrypt 12 rounds) → create User → sign JWT → return { token, user }
Client → store token in localStorage('px_token') → redirect to /dashboard

Login Flow

Client → POST /api/auth/login { email, password }
Server → find user by email → bcrypt.compare → sign JWT → return { token, user }
Client → store token → redirect to /dashboard