diff --git a/backend/README.md b/backend/README.md index a8b7455..e75fb62 100644 --- a/backend/README.md +++ b/backend/README.md @@ -7,25 +7,5 @@ - Phone-first auth works, but `USERNAME_FIELD` is email; align identifier strategy to avoid future auth confusion. ## Near-Term Focus -- Hardening Authentica integration (timeouts, retries, async delivery) and aligning notification provider choices. - -**Authentica E2E** -Run the real Authentica OTP flow only when explicitly enabled. - -Env vars (in `backend/.env` or shell): -- `AUTHENTICA_E2E=1` -- `AUTHENTICA_API_KEY=...` -- `AUTHENTICA_E2E_PHONE=...` (must receive OTP) -- `AUTHENTICA_E2E_CODE=...` (required; no interactive prompt) - -Command: -```bash -cd backend -PYTEST_ADDOPTS='' python3 -m pytest apps/accounts/tests -m external -``` - -Suggested flow: -1. Trigger the E2E test to send the OTP, then set `AUTHENTICA_E2E_CODE` and re-run if needed. -- Decide and document payment lifecycle scope (capture/refund supported vs explicitly out of scope). -- Add timeouts/logging for external calls or introduce minimal async jobs for OTP/notifications. -- Keep booking, payment, and notification orchestration in service layers, not views. +- finalize otp testing +- work on authentication and complete it \ No newline at end of file