[FRONTEND]: Authentication endpoints missing in ZHTP node

[umwelt]

Problem

The API client expects authentication endpoints that don't exist in the ZHTP node.

Missing Endpoints (CRITICAL)

1. POST /api/v1/identity/signin - Sign in with DID and passphrase
2. POST /api/v1/identity/login - Login with credentials (returns full identity)

Current Node Implementation

• POST /api/v1/identity/create - Creates new citizen identity (WORKING)
• No signin/login endpoints (MISSING)

Impact

• BLOCKING ALPHA - Users cannot sign in to existing accounts
• Mobile app signup flow works but login fails
• All user sessions break after account creation

Expected Behavior

POST /api/v1/identity/signin

• Request: { did: string, passphrase: string }
• Response: Identity object with session info
• Should authenticate and return full identity details

POST /api/v1/identity/login

• Request: { identity_id: string, passphrase: string }
• Response: LoginResponse with wallets and identity info
• Should return: identity_id, display_name, identity_type, wallets (primary, ubi, savings)

Implementation Location

ZHTP Node: zhtp/src/api/handlers/identity/mod.rs

Priority

CRITICAL - Must be implemented for alpha release

[umwelt]

Closing as invalid - both endpoints already exist in ZHTP node.

Verification:

• • Implemented in
• • Implemented in

Both endpoints are registered in and match the exact paths expected by the API client in .

Security features implemented:

• Rate limiting (3 attempts/24h per IP)
• Account lockout (5 attempts/15min per identity)
• Session creation with IP/User-Agent binding
• Constant-time credential validation

If there's an actual issue with these endpoints working incorrectly, please open a new issue with specific error details.