Authentication & Account

User authentication and account management for Logbook.

Overview

Logbook uses passwordless authentication as the primary method, with OAuth providers for convenience. We prioritize security while minimizing friction for users.

Beta Launch

Feature	Status
Google OAuth login	Planned
Apple OAuth login	Planned
Email/OTP authentication (6-digit code)	Done
Session management (30-day expiry)	Done

Post-Beta

• Account deletion (GDPR compliance)
• Password reset flow
• Two-factor authentication
• Email verification
• Login with email/password
• Remember device
• Social login (Facebook, Twitter)

User Stories

• As a new user, I want to sign up quickly without creating a password
• As a returning user, I want to stay logged in across sessions
• As a privacy-conscious user, I want to delete my account and data
• As a user, I want to use my existing Google/Apple account for convenience

Auth Flow

1. User opens app
2. Welcome screen → Sign in options
3. Choose: Google | Apple | Email
4. If Email: Enter email → Receive 6-digit code → Enter code
5. If OAuth: Redirect to provider → Return with token
6. Check if existing user:
   - Yes: Go to home
   - No: Go to onboarding (profile setup)

Security Considerations

• JWTs with short expiry + refresh tokens
• Refresh token rotation on use
• Secure token storage (Keychain/Keystore)
• Rate limiting on OTP requests
• OTP expiry (10 minutes)