Initial commit: Setup Expo frontend and FastAPI backend scaffolding

.gitattributes

@@ -0,0 +1,5 @@
+*.png filter=lfs diff=lfs merge=lfs -text
+*.jpg filter=lfs diff=lfs merge=lfs -text
+*.jpeg filter=lfs diff=lfs merge=lfs -text
+*.gif filter=lfs diff=lfs merge=lfs -text
+*.ico filter=lfs diff=lfs merge=lfs -text

.gitignore

@@ -0,0 +1,12 @@
+# Environments
+.env
+venv/
+__pycache__/
+
+# Node
+node_modules/
+.expo/
+
+# OS Files
+.DS_Store
+Thumbs.db

keystone-app

@@ -0,0 +1 @@
+Subproject commit 4444c8c86200e22e1ae48006c96c40920fb4c94d

keystone-backend/.gitignore

@@ -0,0 +1,42 @@
+# Learn more https://docs.github.com/en/get-started/getting-started-with-git/ignoring-files
+
+# dependencies
+node_modules/
+
+# Expo
+.expo/
+dist/
+web-build/
+expo-env.d.ts
+
+# Native
+.kotlin/
+*.orig.*
+*.jks
+*.p8
+*.p12
+*.key
+*.mobileprovision
+
+# Metro
+.metro-health-check*
+
+# debug
+npm-debug.*
+yarn-debug.*
+yarn-error.*
+
+# macOS
+.DS_Store
+*.pem
+
+# local env files
+.env*.local
+.env
+venv/
+# typescript
+*.tsbuildinfo
+
+# generated native folders
+/ios
+/android

keystone-backend/main.py

@@ -0,0 +1,61 @@
+import os
+from fastapi import FastAPI, HTTPException, Header, Depends
+from fastapi.middleware.cors import CORSMiddleware
+from pydantic import BaseModel
+from dotenv import load_dotenv
+
+# Load environment variables
+load_dotenv()
+
+app = FastAPI(title="KeyStone API", version="0.1.0")
+
+# Fetch credentials from environment variables
+DEV_USERNAME = os.getenv("DEV_USERNAME", "admin")
+DEV_PASSWORD = os.getenv("DEV_LOGIN_PASSWORD", "password123")
+MOCK_TOKEN = "mock-jwt-token-xyz123"
+
+app.add_middleware(
+    CORSMiddleware,
+    allow_origins=["*"],
+    allow_credentials=True,
+    allow_methods=["*"],
+    allow_headers=["*"],
+)
+
+# Updated schema to look for username instead of email
+class LoginPayload(BaseModel):
+    username: str
+    password: str
+
+def verify_mock_token(authorization: str = Header(None)):
+    if not authorization or not authorization.startswith("Bearer "):
+        raise HTTPException(status_code=401, detail="Missing or invalid token format")
+    
+    token = authorization.split(" ")[1]
+    if token != MOCK_TOKEN:
+        raise HTTPException(status_code=401, detail="Unauthorized: Invalid Token")
+    return token
+
+@app.get("/health")
+async def health_check():
+    return {"status": "ok", "service": "KeyStone API"}
+
+@app.post("/auth/login")
+async def mock_login(payload: LoginPayload):
+    # Strict matching for both username AND password
+    if payload.username == DEV_USERNAME and payload.password == DEV_PASSWORD:
+        return {
+            "access_token": MOCK_TOKEN,
+            "token_type": "bearer",
+            "user": {"username": payload.username, "id": "mock-uuid-1111-2222"}
+        }
+    
+    # Generic error message so we don't leak which field was incorrect
+    raise HTTPException(status_code=400, detail="Incorrect username or password")
+
+@app.get("/photos")
+async def get_photos(token: str = Depends(verify_mock_token)):
+    return {
+        "message": "Authenticated successfully!",
+        "photos": []
+    }