[4.1] Authentication and session management (PAM-backed) #1
Description
Implement PAM-backed login for local users, consistent identity with CLI (UNIX usernames/UIDs/GIDs), session creation/refresh/logout, secure cookies (HttpOnly/Secure/SameSite), session ID rotation, CSRF protection, brute-force protections, and optional MFA (TOTP, WebAuthn).
Scope
This epic covers 10 decisions and 10 tasks from the Cortex Linux planning system.
Source
- Planning Tool: Skilliks
- Module: See internal planning documentation
Tasks
Tasks will be added as sub-issues or checklist items as specification is refined.
Epic generated from Cortex Linux strategic planning