How to build: Extranet authentication

implemented Partner /extranet/auth/sign-in, /sign-up, /forgot-password, /reset-password, /verify-email.

Same Core Backend winners as Marketplace. Separate session cookie: NEXT_PUBLIC_PARTNER_SESSION_COOKIE_NAME (bd_partner_session). Client: services/partner-auth.ts.

Partner Sign In / Partner Sign Up

POST https://backend-dev.bookdirect.live/public/api/v1/nellalink/user/login

POST https://backend-dev.bookdirect.live/public/api/v1/nellalink/user/register

Store access_token + uuid in the partner session, not the guest cookie.

Enter Email Verification Token

POST https://backend-dev.bookdirect.live/public/api/v1/nellalink/user/verify-email-address

POST https://backend-dev.bookdirect.live/public/api/v1/nellalink/user/verify-email-address/validate

Route: /extranet/auth/verify-email.

Forgot Password / Reset Password

Same reset pair as Marketplace. Routes: /extranet/auth/forgot-password, /extranet/auth/reset-password.

Partner Profile / Edit Profile / Change Password

GET / PATCH https://backend-dev.bookdirect.live/public/api/v1/nellalink/user/{user_uuid}

Core Backend must reject another user’s uuid. Not a Vue/Next IDOR task.