Monerh A

[Miuroro]

🤖 What I did:

• Built a stateless authentication system using Spring Security and JWT.
• Created protected /logout and /profile endpoints that require a valid JWT token.
• Used the stateless JWT approach for logging out (client-side token removal, no server-side session logic).
• Secured user passwords in the database using BCrypt hashing.

---

👾 How to test it:

1. Run the application and open Postman.
2. Use POST /users/register to save a new user.
3. Use POST /auth/login with those credentials to receive a JWT token.
4. Paste that token into the Bearer Token field in the Authorization tab to access the protected GET /users/profile and POST /auth/logout endpoints.