Notes

Signup

Frontend → /signup → Validate → Hash password → Save user → Create JWT → Store JWT in cookie → User logged in

Login

Frontend → /login → Validate email → Check password → Create JWT → Store JWT in cookie → User logged in

Logout

Frontend → /logout → Remove cookie → User logged out