3. On‑Boarding & Authentication
- The sign‑in button shall initiate Google OAuth 2.0 with email scope only.
- The system shall create a new User record on first successful OAuth callback.
- The system shall store only the Google user ID, display name, and email hash, never the raw OAuth access token.
- Password‑based logins are explicitly out of scope for V1.
No due date
0% Completed
No results
Try adjusting your search filters.