로그인 페이지 및 기능 구현

backend/cmd/server/main.go

@@ -20,6 +20,7 @@ import (
 	"github.com/gofiber/fiber/v2/middleware/encryptcookie"
 	"github.com/gofiber/fiber/v2/middleware/recover"
 	"github.com/gofiber/fiber/v2/middleware/requestid"
+	"github.com/joho/godotenv"
 )
 
 func getEnv(key, fallback string) string {
@@ -30,6 +31,16 @@ func getEnv(key, fallback string) string {
 }
 
 func main() {
+	// Load .env file from possible paths
+	// 1. .env (Current Directory)
+	// 2. ../.env (Project Root when running from backend/)
+	// 3. ../../.env (Project Root when running from backend/cmd/server/)
+	if err := godotenv.Load(".env"); err != nil {
+		if err := godotenv.Load("../.env"); err != nil {
+			godotenv.Load("../../.env")
+		}
+	}
+
 	// 0. Initialize Logger
 	logger.Init(logger.Config{
 		ServiceName: "baron-sso",
@@ -223,6 +234,14 @@ func main() {
 	auth.Post("/qr/poll", authHandler.PollQRLogin)
 	auth.Post("/qr/approve", authHandler.ScanQRLogin)
 
+	// Signup Routes
+	signup := auth.Group("/signup")
+	signup.Post("/check-email", authHandler.CheckEmail)
+	signup.Post("/send-email-code", authHandler.SendSignupEmailCode)
+	signup.Post("/send-sms-code", authHandler.SendSignupSmsCode)
+	signup.Post("/verify-code", authHandler.VerifySignupCode)
+	signup.Post("/", authHandler.Signup)
+
 	// Admin Routes
 	admin := api.Group("/admin")
 	admin.Post("/users", adminHandler.CreateUser)

backend/go.mod

@@ -35,6 +35,7 @@ require (
 	github.com/go-faster/errors v0.7.1 // indirect
 	github.com/goccy/go-json v0.10.4 // indirect
 	github.com/google/uuid v1.6.0 // indirect
+	github.com/joho/godotenv v1.5.1 // indirect
 	github.com/klauspost/compress v1.18.0 // indirect
 	github.com/lestrrat-go/blackmagic v1.0.3 // indirect
 	github.com/lestrrat-go/httpcc v1.0.1 // indirect

backend/go.sum

@@ -68,6 +68,8 @@ github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8=
 github.com/google/go-cmp v0.7.0/go.mod h1:pXiqmnSA92OHEEa9HXL2W4E7lf9JzCmGVUdgjX3N/iU=
 github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
+github.com/joho/godotenv v1.5.1 h1:7eLL/+HRGLY0ldzfGMeQkb7vMd0as4CfYvUVzLqw0N0=
+github.com/joho/godotenv v1.5.1/go.mod h1:f4LDr5Voq0i2e/R5DDNOoa2zzDfwtkZa6DnEwAbqwq4=
 github.com/kisielk/errcheck v1.5.0/go.mod h1:pFxgyoBC7bSaBwPgfKdkLd5X25qrDl4LWUI2bnpBCr8=
 github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck=
 github.com/klauspost/compress v1.13.6/go.mod h1:/3/Vjq9QcHkK5uEr5lBEmyoZ1iFhe47etQ6QUkpK6sk=

backend/internal/domain/auth_models.go

@@ -31,3 +31,31 @@ type QRInitResponse struct {
 	PendingRef string `json:"pendingRef"`
 	ExpiresIn  int    `json:"expiresIn"`
 }
+
+// Signup Flow Models
+
+type CheckEmailRequest struct {
+	Email string `json:"email"`
+}
+
+type SendSignupCodeRequest struct {
+	Target string `json:"target"` // Email or Phone
+	Type   string `json:"type"`   // "email" or "phone"
+}
+
+type VerifySignupCodeRequest struct {
+	Target string `json:"target"` // Email or Phone
+	Type   string `json:"type"`   // "email" or "phone"
+	Code   string `json:"code"`
+}
+
+type SignupRequest struct {
+	Email           string `json:"email"`
+	Password        string `json:"password"`
+	Name            string `json:"name"`
+	Phone           string `json:"phone"`
+	AffiliationType string `json:"affiliationType"` // "AFFILIATE" or "GENERAL"
+	CompanyCode     string `json:"companyCode,omitempty"`
+	Department      string `json:"department"`
+	TermsAccepted   bool   `json:"termsAccepted"`
+}

backend/internal/handler/auth_handler.go

@@ -97,6 +97,11 @@ func (h *AuthHandler) CheckEmail(c *fiber.Ctx) error {
 		return c.Status(fiber.StatusBadRequest).JSON(fiber.Map{"error": "Invalid request"})
 	}
 
+	// Email Format Validation
+	if !strings.Contains(req.Email, "@") || !strings.Contains(req.Email, ".") {
+		return c.Status(fiber.StatusBadRequest).JSON(fiber.Map{"error": "Invalid email format"})
+	}
+
 	if h.DescopeClient == nil {
 		return c.Status(fiber.StatusServiceUnavailable).JSON(fiber.Map{"error": "Identity provider unavailable"})
 	}
@@ -366,7 +371,7 @@ func (h *AuthHandler) Signup(c *fiber.Ctx) error {
 		slog.Error("[Signup] Failed to set password", "error", err)
 		// Rollback? Delete user?
 		h.DescopeClient.Management.User().Delete(context.Background(), req.Email)
-		return c.Status(fiber.StatusInternalServerError).JSON(fiber.Map{"error": "Failed to set password"})
+		return c.Status(fiber.StatusInternalServerError).JSON(fiber.Map{"error": fmt.Sprintf("Failed to set password: %v", err)})
 	}
 
 	// 4. Cleanup Redis

backend/internal/service/redis_service.go

@@ -30,6 +30,10 @@ func NewRedisService() (*RedisService, error) {
 		return nil, err
 	}
 
+	// [DEV-FIX] Disable stop-writes-on-bgsave-error to allow writes even if persistence fails
+	// This is common in dev docker environments with permission issues.
+	rdb.ConfigSet(ctx, "stop-writes-on-bgsave-error", "no")
+
 	return &RedisService{Client: rdb}, nil
 }