🏠 Overview › 🎯 Features ›🎯 Email & Password Login

Email & Password Login

Feature Detail

low complexity extracted Authentication & Access Control Confidence: 100%
1
Components
58
Shared
0
User Stories
Yes
Analyzed

Description

This feature provides a secure email and password authentication flow as a fallback login method for all user roles. It includes input validation, error messaging, and secure token exchange against the REST API. Upon successful authentication, JWT access and refresh tokens are issued and stored securely on the device. The login screen is the fallback entry point when BankID or Vipps authentication is unavailable or not preferred, ensuring all users can always access the platform.

User Flow

Email & Password Login user flow
Click to expand

Analysis

Business Value

Email and password login is the universal fallback that guarantees access for all user roles regardless of their ability or willingness to use BankID or Vipps. Coordinators and administrators frequently access the platform from contexts where BankID is impractical, making this a non-negotiable baseline. Secure token management ensures session continuity without requiring repeated authentication, reducing friction for daily users. This also supports the admin panel access pattern where HTTP-only cookies are used for web sessions, providing a consistent auth model across mobile and web surfaces.

Implementation Notes

The login screen is a stateless Flutter widget driven by a BLoC that manages form validation, loading, and error states. Credentials are submitted to POST /api/v1/auth/login, which returns a JWT access token and refresh token. The Token Storage component uses Flutter Secure Storage (backed by Keychain on iOS and Keystore on Android) to persist tokens. The REST API client's request interceptor automatically attaches the access token and handles token refresh via POST /api/v1/auth/refresh. Passwords are never stored; only tokens are persisted. All fields meet WCAG 2.2 AA touch target and contrast requirements.

Components (59)

User Interface (1)

ui Login Screen low

Shared Components

These components are reused across multiple features

Infrastructure (20)

infrastructure JWT Infrastructure medium Shared infrastructure JWT Infrastructure low Shared infrastructure Auth Middleware medium Shared infrastructure Report API Middleware low Shared infrastructure Report Access Guard low Shared infrastructure Approval Audit Logger low Shared infrastructure End-to-End Encryption Infrastructure high Shared infrastructure Email Delivery Infrastructure low Shared infrastructure Invitation Token Infrastructure medium Shared infrastructure Signed URL Provider low Shared infrastructure Multi-Tenancy Infrastructure high Shared infrastructure Calculator Export Infrastructure medium Shared infrastructure Request & Response Interceptors high Shared infrastructure Design Token System medium Shared infrastructure Semantic Labels Infrastructure medium Shared infrastructure Connectivity Infrastructure low Shared infrastructure Local Database Infrastructure high Shared infrastructure Secure Storage Infrastructure medium Shared infrastructure Connection Pool Infrastructure medium Shared infrastructure Database Migration Infrastructure medium Shared

User Stories

No user stories have been generated for this feature yet.