3. On‑Boarding & Authentication

  1. The sign‑in button shall initiate Google OAuth 2.0 with email scope only.
  2. The system shall create a new User record on first successful OAuth callback.
  3. The system shall store only the Google user ID, display name, and email hash, never the raw OAuth access token.
  4. Password‑based logins are explicitly out of scope for V1.
No due date
0% Completed

No results

Try adjusting your search filters.