Epics

.tiny-brain/
└── auth-flow/
    └── epic.md          ← this is what we're documenting

---
id: auth-flow
type: epic
title: Authentication Flow
status: not_started
created: 2026-05-20
updated: 2026-05-20
---

# Authentication Flow

## Goals

Why we're doing this work and what success looks like.

- Replace the placeholder password auth with OAuth
- Support Google, GitHub, and email-link sign-in
- Cut the average login time below 3 seconds

## Features

Features that make up this epic. Each one lives in a sibling .md file.

### Feature 1: Google OAuth
**File**: [google-oauth.md](google-oauth.md)
**Status**: in_progress
**Description**: Wire Google's OAuth 2.0 flow into the login route.

### Feature 2: Token refresh
**File**: [token-refresh.md](token-refresh.md)
**Status**: not_started
**Description**: Background renewal of access tokens before expiry.