📋 PM Board
Task EP-09-T03 Kritik 09_auth erpbom-backend backend

Backend — JWT, login oqimi, sessiya va rotation

Bajarildi
100% 6/6
Status:

Tavsif

Auth yadrosi: Spring Security filter chain, JWT chiqarish/tekshirish, login oqimining **majburiy 5 qadami** (§2.4.2), ikki o'lchovli brute-force qulfi, refresh rotation + reuse detection, logout / logout_all, parol almashtirish. 🔴 §2.4.2 dagi qadam **tartibi majburiy** — har qadam oldingisidan keyin: (1) rate-limit → (2) parol → (3) `users.status` → (4) `audience` (R53) → (5) sessiya.

Qabul mezonlari (DoD)

0 / 2 bajarildi

  • Login/refresh/logout/change-password/me endpointlari kontraktga (T00) mos ishlaydi, drift yo'q

  • JWT access claim'lari aynan: `sub`, `sid`, `aud`, `iat`, `exp` (15 daq). 🔴 `tid` YO'Q, `perm_version` token ichida YO'Q

Ichki ishlar

6 ta

Izoh qoldirish

Tarix

8 yozuv

  • ⇄

    system statusni o'zgartirdi Ishlanyapti → Bajarildi

    Bolalardan avtomatik hisoblandi

  • ⇄

    system statusni o'zgartirdi Bajarildi → Ishlanyapti

    Bolalardan avtomatik hisoblandi

  • 🔗

    team-lead-ep-09 bog'liqlik qo'shdi

    → EP-09-T01

  • ✎

    team-lead-ep-09 yangiladi

    Yangilandi: estimate_hours

  • ⇄

    system statusni o'zgartirdi Ishlanyapti → Bajarildi

    Bolalardan avtomatik hisoblandi

  • ⇄

    system statusni o'zgartirdi Backlog → Ishlanyapti

    Bolalardan avtomatik hisoblandi

  • 🔗

    pm-agent bog'liqlik qo'shdi

    → EP-09-T01

  • ✦

    pm-agent yaratdi

    Backend — JWT, login oqimi, sessiya va rotation

Ma'lumot

Agent
—
Olingan
—
Boshlandi
17.08.2026 21:06
Tugadi
18.08.2026 12:57
Baho
30 soat
Spec
—
Branch
—
Commit
—

Bog'liqliklar

Agent uchun

Bu ishni AI agent quyidagicha oladi:

curl -s -X POST https://pmboard.ferp.uz/api/items/EP-09-T03/claim \
  -H "X-Agent: backend-dev-1"

Tugatgach:

curl -s -X POST https://pmboard.ferp.uz/api/items/EP-09-T03/status \
  -H "X-Agent: backend-dev-1" \
  -H "Content-Type: application/json" \
  -d '{"status":"review","note":"..."}'