Day 4

---

Planning is the key to get rid of panic.

Okay So this is what I have planned

Task breakdown

Authentication System - Complete Task Breakdown

Authentication System - Complete Task Breakdown

Milestone 1: Email Auth Flow (Due: June 16, 2025)

Backend Tasks

Main Task	Subtask	Priority	Estimated Hours	Dependencies
Database Setup	Design user table schema (id, email, password_hash, email_verified, created_at, updated_at)	High	2	-
	Create user entity/model classes	High	1	Schema design
	Set up database migrations	High	1	Entity classes
	Create user repository/DAO layer	High	2	Database migrations
Email Service Setup	Configure Java Mail properties	High	1	-
	Create email template service	High	2	Java Mail config
	Implement email verification template	High	1	Template service
	Implement password reset template	High	1	Template service
	Create email sending utility class	High	2	Templates
Authentication Core	Implement password hashing (BCrypt)	High	1	-
	Create JWT token generation service	High	2	-
	Implement JWT token validation	High	2	Token generation
	Create user registration endpoint	High	3	Database, Email service
	Create user login endpoint	High	2	JWT service, Password hashing
	Implement email verification endpoint	High	2	Email service, JWT
Password Reset Flow	Create forgot password endpoint	Medium	2	Email service
	Create reset password endpoint	Medium	2	JWT validation
	Implement password reset token validation	Medium	2	JWT service
Security & Validation	Add input validation (email format, password strength)	High	2	-
	Implement rate limiting for auth endpoints	Medium	3	-
	Add CORS configuration	High	1	-
	Create custom exception handlers	Medium	2	-
Testing	Unit tests for user service	High	4	All auth services
	Integration tests for auth endpoints	High	6	All endpoints
	Test email sending (mock/real)	Medium	2	Email service
Documentation	API documentation for auth endpoints	Medium	2	All endpoints
	Database schema documentation	Low	1	Schema design

Frontend Tasks

Main Task	Subtask	Priority	Estimated Hours	Dependencies
UI Components	Create login form component	High	3	-
	Create registration form component	High	3	-
	Create forgot password form	Medium	2	-
	Create reset password form	Medium	2	-
	Create email verification page	High	2	-
Form Validation	Client-side email validation	High	1	Form components
	Client-side password strength validation	High	2	Form components
	Real-time validation feedback	Medium	2	Validation logic
State Management	Set up auth state management (Redux/Context)	High	3	-
	Create auth actions and reducers	High	2	State setup
	Implement user session persistence	High	2	Auth state
API Integration	Create auth API service layer	High	2	Backend endpoints
	Implement login API calls	High	1	API service
	Implement registration API calls	High	1	API service
	Implement password reset API calls	Medium	1	API service
Routing & Navigation	Set up protected routes	High	2	Auth state
	Create auth route guards	High	2	Protected routes
	Implement redirect after login/logout	Medium	1	Route guards
User Experience	Loading states for forms	Medium	2	Form components
	Error handling and display	High	3	API integration
	Success messages and confirmations	Medium	2	Form components
	Responsive design for auth forms	Medium	4	UI components
Testing	Unit tests for auth components	High	4	All components
	Integration tests for auth flow	High	4	All auth features
	E2E tests for complete auth journey	Medium	6	All features

---

Milestone 2: Magic Link Sign-Up (Due: June 19, 2025)

Backend Tasks

Main Task	Subtask	Priority	Estimated Hours	Dependencies
Magic Link Infrastructure	Create magic link token generation	High	2	JWT service
	Implement secure link creation with expiry	High	2	Token generation
	Create magic link verification endpoint	High	3	Token validation
	Design magic link email template	High	1	Email service
Database Changes	Add magic link tracking table	Medium	1	User table
	Create indexes for performance	Low	1	Magic link table
Security	Implement one-time use tokens	High	2	Token generation
	Add rate limiting for magic link requests	High	2	Rate limiting service
	Validate email ownership	High	2	Email verification
API Endpoints	Create send magic link endpoint	High	2	Magic link service
	Create verify magic link endpoint	High	2	Token validation
Testing	Unit tests for magic link service	High	3	Magic link service
	Integration tests for magic link flow	High	4	All magic link endpoints

Frontend Tasks

Main Task	Subtask	Priority	Estimated Hours	Dependencies
UI Components	Create magic link request form	High	2	-
	Create magic link verification page	High	2	-
	Create magic link success/error states	Medium	2	Verification page
Integration	Add magic link option to login page	High	1	Login component
	Implement magic link API calls	High	2	API service
	Handle magic link URL parameters	High	2	Routing
User Experience	Email sent confirmation page	Medium	1	Request form
	Expired/invalid link handling	High	2	Verification page
Testing	Unit tests for magic link components	High	2	Magic link components
	E2E tests for magic link flow	Medium	3	All magic link features

---

Milestone 3: Google/GitHub SSO (Due: June 22, 2025)

Backend Tasks

Main Task	Subtask	Priority	Estimated Hours	Dependencies
OAuth Setup	Configure Google OAuth2 credentials	High	1	-
	Configure GitHub OAuth2 credentials	High	1	-
	Set up OAuth2 dependencies	High	1	-
Database Changes	Add OAuth provider columns to user table	High	1	User table
	Create OAuth account linking table	Medium	2	User table
OAuth Implementation	Implement Google OAuth2 flow	High	4	OAuth setup
	Implement GitHub OAuth2 flow	High	4	OAuth setup
	Create OAuth callback endpoints	High	3	OAuth flows
	Handle OAuth user profile mapping	High	3	Callback endpoints
User Management	Implement account linking logic	High	3	OAuth profiles
	Handle existing email conflicts	High	2	Account linking
	Create or update user from OAuth data	High	2	User service
Security	Validate OAuth state parameter	High	2	OAuth flows
	Implement PKCE for OAuth (if needed)	Medium	2	OAuth security
	Add OAuth-specific rate limiting	Medium	2	Rate limiting
Testing	Unit tests for OAuth services	High	4	OAuth services
	Integration tests for OAuth flows	High	6	OAuth endpoints
	Mock OAuth provider responses	Medium	3	Testing setup

Frontend Tasks

Main Task	Subtask	Priority	Estimated Hours	Dependencies
UI Components	Create Google sign-in button	High	1	-
	Create GitHub sign-in button	High	1	-
	Create OAuth loading/callback page	High	2	-
	Add social login section to auth forms	High	2	Auth components
OAuth Integration	Implement Google OAuth client-side flow	High	3	Google setup
	Implement GitHub OAuth client-side flow	High	3	GitHub setup
	Handle OAuth callbacks and redirects	High	3	OAuth flows
	Manage OAuth error states	High	2	OAuth integration
User Experience	Social login button styling	Medium	2	Social buttons
	OAuth loading indicators	Medium	1	OAuth integration
	Handle OAuth cancellation	Medium	1	OAuth flows
Account Management	Create account linking UI	Medium	3	User profile
	Show connected accounts	Medium	2	Account linking
Testing	Unit tests for OAuth components	High	3	OAuth components
	E2E tests for social login flows	High	4	OAuth features

---

Milestone 4: QA, Metrics, Security (Due: June 26, 2025)

Backend Tasks

Main Task	Subtask	Priority	Estimated Hours	Dependencies
Metrics & Analytics	Integrate PostHog/Mixpanel SDK	High	2	-
	Track user registration events	High	2	Analytics SDK
	Track login method usage	High	2	All auth methods
	Track authentication failures	High	2	Error handling
	Create auth metrics dashboard	Medium	3	Metrics tracking
Security Hardening	Implement session management	High	4	JWT service
	Add brute force protection	High	3	Rate limiting
	Implement account lockout policies	Medium	2	User service
	Add security headers	High	1	Security config
	Implement CSRF protection	High	2	Security config
Logging & Monitoring	Set up structured logging	High	2	-
	Log all authentication events	High	2	Logging setup
	Create alerts for auth failures	Medium	2	Monitoring
	Set up health checks	High	1	-
Performance	Add database connection pooling	Medium	1	Database config
	Optimize query performance	Medium	2	Database operations
	Add caching for frequently accessed data	Low	3	Redis/cache setup
Final Testing	Load testing for auth endpoints	Medium	4	All endpoints
	Security penetration testing	High	6	All features
	Cross-browser compatibility testing	Medium	3	Frontend features

Frontend Tasks

Main Task	Subtask	Priority	Estimated Hours	Dependencies
Analytics Integration	Integrate frontend analytics tracking	High	2	Backend metrics
	Track user interaction events	Medium	2	Analytics setup
	Track conversion funnel metrics	Medium	2	All auth flows
Performance Optimization	Optimize bundle size	Medium	2	Build configuration
	Implement lazy loading for auth components	Low	2	Component structure
	Add performance monitoring	Medium	2	Performance tools
Accessibility	Add ARIA labels to auth forms	High	2	Form components
	Ensure keyboard navigation support	High	2	All components
	Test with screen readers	Medium	3	Accessibility setup
Error Handling	Improve error message clarity	High	2	Error handling
	Add offline state handling	Low	2	Network detection
	Implement retry mechanisms	Medium	2	API calls
Browser Compatibility	Test across major browsers	High	4	All features
	Add polyfills if needed	Medium	2	Browser testing
Final Polish	UI/UX review and refinements	Medium	4	All components
	Mobile responsiveness testing	High	3	Responsive design
	Performance optimization	Medium	3	All features

---

Summary

Total Estimated Hours

• Backend: ~145 hours
• Frontend: ~120 hours
• Total: ~265 hours

Critical Path Dependencies

1. Database setup → User service → Auth endpoints
2. Email service → Email verification → Magic links
3. JWT service → All authentication methods
4. OAuth setup → Social login implementation
5. All auth methods → Testing & security hardening

Resource Allocation Recommendations

• Abhishek (Dev): Focus primarily on backend tasks, assist with complex frontend integrations
• Diksha (Testing): Begin test planning early, create test cases parallel to development
• Consider additional frontend developer if timeline is tight

Link to original

Out of this. I started Working on the Email Service Today. I had the SMTP Server Already present. So that was a relief.

So Email Done.

package io.saanvi.saanvibackend.shared.EmailService;
 
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.mail.SimpleMailMessage;
import org.springframework.mail.javamail.JavaMailSender;
import org.springframework.mail.javamail.MimeMessageHelper;
import org.springframework.stereotype.Component;
import org.thymeleaf.TemplateEngine;
import org.thymeleaf.context.Context;
 
import jakarta.mail.internet.MimeMessage;
 
@Component
public class MailSender {
 
    @Autowired
    private JavaMailSender emailSender;
 
 
    @Autowired
    private TemplateEngine templateEngine;
 
    public void sendSimpleMessage() {
        SimpleMailMessage message = new SimpleMailMessage();
        message.setFrom("you@abhi8290.in");
        message.setTo("abhishek8290.work@gmail.com");
        message.setSubject("Simple Test Email");
        message.setText("Hello there Let's see if this works ");
        emailSender.send(message);
    }
    public void sendWelcomeEmail(String to, String name, String code) throws Exception {
        // Prepare the email context
        Context context = new Context();
        context.setVariable("name", name);
        context.setVariable("code", code);
 
        // Process the HTML template
        String htmlContent = templateEngine.process("welcome-email.html", context);
 
        // Prepare the email message
        MimeMessage mimeMessage = emailSender.createMimeMessage();
        MimeMessageHelper helper = new MimeMessageHelper(mimeMessage, true, "UTF-8");
        helper.setTo("abhishek8290.work@gmail.com");
        helper.setFrom("you@abhi8290.in");
        helper.setSubject("Welcome to Saanvi!");
        helper.setText(htmlContent, true); // true = HTML
 
        emailSender.send(mimeMessage);
    }
}
 

package io.saanvi.saanvibackend.core.config;
 
import org.springframework.beans.factory.annotation.Value;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.Configuration;
import org.springframework.mail.javamail.JavaMailSender;
import org.springframework.mail.javamail.JavaMailSenderImpl;
 
import java.util.Properties;
 
@Configuration
public class MailConfig {
 
    @Value("${spring.mail.host}")
    private String mailHost;
 
    @Value("${spring.mail.port}")
    private int mailPort;
 
    @Value("${spring.mail.username}")
    private String mailUsername;
 
    @Value("${spring.mail.password}")
    private String mailPassword;
 
    @Bean
    public JavaMailSender getJavaMailSender() {
        JavaMailSenderImpl mailSender = new JavaMailSenderImpl();
        
        // Set the basic connection properties
        mailSender.setHost(mailHost);
        mailSender.setPort(mailPort);
        mailSender.setUsername(mailUsername);
        mailSender.setPassword(mailPassword);
 
        // Set additional properties
        Properties props = mailSender.getJavaMailProperties();
        props.put("mail.transport.protocol", "smtp");
        props.put("mail.smtp.auth", "true");
        props.put("mail.smtp.starttls.enable", "true");
        props.put("mail.debug", "true");
        
        return mailSender;
    }
}

Interesting things I learnt today

This is how you can fetch the things from the application.properties

@Value("${spring.mail.host}")

To Do

• Tomorrow I have an interview with Speechify So probably Not much tome to do anything. [Saanvi]
• But Still i could just make the link to send and save in Redis for a day. That’s all [Saanvi]
• Read About LRU Cache and How to test things in java. [Speechify]
• Also the XML parser. [Speechify]
• Also Why the BulkDisbursal is failing [Seaboard]

Overall the day was okay as woke up at 11 and till 4 i was just out for taking the packed things to the new flat.

Cool Peach Off.