Authentication verifies a user's identity before access to protected functionality. In the tutor application, users submit a username and password through a sign-in form. section 1.3.2 section 9.1
A tutor sign-in request follows this path:
- The form sends a POST request to the Actix Web server. section 9.1
- A handler looks up the user record in the local database and checks the submitted password against the stored password hash using Argon2. section 9.3
- On failure, the form is shown again with an error; on success, the user proceeds to the application. section 9.1
Testing sign-in
Submit a correct username and password, then retry with a wrong password and an invalid username to check the success and error paths. section 9.3
The sign-in flow diagram shows the request and authentication path. section 9.1
