backend/docs/MILESTONE_01.md

Milestone 01: Local Backend Foundation

Implemented in this milestone

• Project identity and documentation for Visione.
• Root AGENTS.md for future coding agents.
• Local Docker services for MySQL and Mailpit.
• Initial MySQL schema and seed data.
• Drogon backend structure for auth, reports, admin data and stats.
• OTP email delivery through Mailpit.
• Focused regression tests for technical endpoints and core validation helpers.
• Local admin seed: [email protected] / ChangeMe123!, with forced password change flag.
• Multipart report media upload endpoint storing files under uploads/reports/.
• PBKDF2-HMAC-SHA256 password hashes for credentials. Legacy SHA-256 hashes are intentionally rejected.

To do next

• Consider Argon2id/bcrypt and password reset flows before production hardening.
• Add real email provider configuration for non-local environments.
• Add CIE/SPID integration design and provider adapters.
• Expand frontend-driven API coverage as Vue screens are implemented.
• Add stronger frontend-driven endpoint coverage as Vue screens are implemented.
• Add notification channels, route optimization and open-data exports.
• Dockerize the backend only for final delivery/deployment.