Background

Mobile apps currently relies on session/cookie based authentication. Web is moving towards a system like OAuth. This task is to understand technical implications and effort estimate to migrate

Requirements

• Review current login flow
• Map where OAuth would alter deep-link handling and token storage
• List dependencies for backend endpoints (if any), specifically what currently exists or would need to exist
• What gaps exist in native client flows
• Assess impact (if any) on offline mode, and analytics
• Document required configuration for client registration
• Document token lifetimes, refresh rotation, and logout options
• Identify feature-flag (to have a kill switch) or fallback needs for implementation

Output

• As-is state
• Gaps
• Open Questions
• Risks or blockers
• Estimate of app engineering effort
• Document unknowns
• Create a table of estimated tasks and relative complexity (written as days of work and number of engineers)