Implement JWT-based Authentication System

[DevMuhdishaq]

Overview

Implement a standardized JWT (JSON Web Token) based authentication system for the astraport-api to ensure secure and scalable user authentication across all endpoints.

Objectives

• Replace any existing basic auth mechanisms with JWT tokens
• Implement token generation on user login
• Implement token validation middleware
• Add refresh token mechanism for extended sessions
• Set secure expiration times for tokens

Implementation Details

• Use industry-standard JWT libraries
• Implement proper token signing with secret keys
• Add token blacklisting for logout functionality
• Include token metadata (user ID, roles, permissions)
• Support token refresh without re-authentication

Acceptance Criteria

• JWT tokens are generated on successful login
• All protected endpoints require valid JWT tokens
• Tokens expire after configured duration
• Refresh tokens can extend user sessions
• Logout invalidates tokens properly