What problem does it solve?
It helps you build and maintain a reliable Commory server that can authenticate users, import and validate MsgLayer data, and expose a consistent mobile API without breaking the contract.
Core Features & Use Cases
- JWT auth with secure password hashing and refresh rotation: Supports login, refresh, and logout while enforcing rate-limiting and one-use refresh tokens.
- First-run setup wizard: Initializes admin user and setup status with migration-safe persistence.
- MsgLayer import, validation, and querying: Validates MsgLayer payloads (including schema checks and additionalProperties constraints), then imports and serves timeline/search/threads/identities via bearer-auth routes.
- File-backed storage with a storage provider abstraction: Enables predictable persistence-on-write and provider switching (e.g., JSON-file and SQLite adapters).
Quick Start
Implement your change by following the thin-handler pattern in backend/internal/api and verifying contract alignment with docs/mobile-api.md, then run go vet and go test in the backend directory.