@@ -314,16 +314,54 @@ All 638 tests passing. Here's what was fixed and added:
31431411 . ** Configurable Embedding Model**
315315 - ` EMBEDDING_MODEL ` env var (default: all-MiniLM-L6-v2)
316316
317+ 12 . ** User Authentication**
318+ - JWT-based login/register system
319+ - SQLite persistence for user accounts
320+ - Protected routes requiring authentication
321+ - Beliefs associated with user accounts
322+
317323### Remaining Known Issues
318324
319325- Contradiction detection uses embeddings and antonym lists, not full semantic understanding
320326
321327---
322328
329+ ## Authentication
330+
331+ ABES includes a complete user authentication system:
332+
333+ ### Endpoints
334+
335+ | Endpoint | Method | Description |
336+ | ----------| --------| -------------|
337+ | ` /auth/register ` | POST | Create new account |
338+ | ` /auth/login ` | POST | Login, returns JWT token |
339+ | ` /auth/me ` | GET | Get current user (requires token) |
340+ | ` /auth/logout ` | POST | Logout (client discards token) |
341+
342+ ### How It Works
343+
344+ 1 . Register with email, name, password (min 6 chars)
345+ 2 . Login to receive JWT token
346+ 3 . Include token in ` Authorization: Bearer <token> ` header
347+ 4 . Beliefs are associated with your user ID
348+
349+ ### Frontend
350+
351+ The Next.js frontend handles auth automatically:
352+ - Redirects to ` /login ` if not authenticated
353+ - Stores token in localStorage
354+ - Shows user name and logout button in header
355+
356+ ### User Data Storage
357+
358+ User accounts are stored in ` data/users.db ` (SQLite). This file is in ` .gitignore ` and will never be committed.
359+
360+ ---
361+
323362## Limitations
324363
325364- Contradiction detection uses embeddings and antonym lists, not full semantic understanding
326- - No authentication (session isolation is available but no user auth)
327365
328366---
329367
@@ -335,7 +373,6 @@ Not yet implemented:
335373- [ ] Document ingestion service
336374- [ ] Full semantic contradiction detection (LLM-based)
337375- [ ] Benchmarks against production memory systems
338- - [ ] Authentication and user management
339376
340377---
341378
0 commit comments