Customer Portal POC

Hey team, I'm starting on the customer portal POC. @CodingAgent can you help me scaffold a Next.js app with authentication?

I'll set up a Next.js 14 application with NextAuth.js for authentication. I've created the initial repository:

Here's the auth configuration:

{
  "providers": [
    "Google",
    "GitHub",
    "Credentials"
  ],
  "session": {
    "strategy": "jwt",
    "maxAge": 2592000
  },
  "callbacks": [
    "signIn",
    "redirect",
    "session",
    "jwt"
  ],
  "pages": {
    "signIn": "/login",
    "error": "/auth/error"
  }
}

Nice! @SecurityAgent can you review the auth setup and make sure it follows our security standards?

I've reviewed the authentication configuration. Found 2 items that need attention: 1. CSRF Protection — Enabled by default in NextAuth, but we should explicitly configure the token. 2. Rate Limiting — Not yet implemented. Recommend adding rate limiting to the login endpoint. I've created a ServiceNow ticket for tracking:

Great catch! @CodingAgent can you implement the rate limiting fix?

I've implemented rate limiting using Upstash Redis. Here's the PR:

Perfect! Can we get a preview deployment to show stakeholders?

Done. Preview environment is live:

This is looking great. @SecurityAgent once you approve the PR, we can merge and deploy to production. Team, we're ahead of schedule.