auth via DB

app/main.py

@@ -2,17 +2,28 @@ from pathlib import Path
 
 from fastapi import FastAPI
 from fastapi.staticfiles import StaticFiles
+from starlette.middleware.sessions import SessionMiddleware
 
-from .routes import apps, backups, deployments, health
+from .config import read_env_value
+from .routes import apps, auth, backups, deployments, health
 
 
 def create_app() -> FastAPI:
     app = FastAPI(title="AppFactory Portal")
+    session_secret = read_env_value("PORTAL_SESSION_SECRET", "") or "dev-only-appfactory-session-secret"
+
+    app.add_middleware(
+        SessionMiddleware,
+        secret_key=session_secret,
+        same_site="lax",
+        https_only=False,
+    )
 
     static_dir = Path(__file__).parent / "static"
     app.mount("/static", StaticFiles(directory=static_dir), name="static")
 
     app.include_router(health.router)
+    app.include_router(auth.router)
     app.include_router(apps.router)
     app.include_router(backups.router)
     app.include_router(deployments.router)
@@ -20,4 +31,4 @@ def create_app() -> FastAPI:
     return app
 
 
-app = create_app()
+app = create_app()