Thanakorn
73c680e844
Harden sign-in and password reset
...
- OTP attempt limits, constant-time compare, random reference codes
- DB-backed rate limits (429) on sign-in, OTP, reset, register, onboarding
- one generic sign-in failure message; reset request no longer reveals accounts
- no password kept in the session; real status codes on failures
2026-09-24 14:53:40 +07:00
Thanakorn
9afcf072b0
Add OTP_REQUIRED switch for email OTP login
2026-09-14 15:03:16 +07:00
nok
618045540a
fix login and configurations
2026-08-03 11:17:41 +07:00
Thanakorn S
1237888ab9
stock aggregate table
2026-05-25 13:30:10 +07:00
Thanakorn S
45a78a3fed
login: block concurrent login, single-factor auth for staff/viewer
2026-05-25 09:43:30 +07:00
Thanakorn S
5ca6b49fd0
code audit fixes: require_once, issue flow, role guards
2026-05-23 17:06:08 +07:00
Thanakorn S
8ec2e89f79
merge accounting app and solve conflict
2026-05-20 13:22:17 +07:00
Thanakorn S
91f8bb854f
review code pattern consistency
2026-05-20 13:07:57 +07:00
Thanakorn S
c7b6791e3a
revert
2026-05-13 16:22:31 +07:00
Thanakorn S
47ccd7585b
debug server error
2026-05-13 16:19:04 +07:00
Thanakorn S
79e66bd354
add forget password
2026-05-12 17:19:22 +07:00
Thanakorn S
7a87909392
web app security fix
2026-05-11 13:49:44 +07:00
Thanakorn S
a75d37e841
closing security gap [ignore guarding change for now]
2026-05-07 10:29:14 +07:00
Thanakorn S
f6dc9a3278
modify classed and comments
2026-04-29 14:21:09 +07:00
Thanakorn S
d8fd30c961
Login , Register ,and onboarding
2026-04-28 11:59:49 +07:00
Thanakorn S
7cb78d013b
Complete security audit fixes
2026-03-09 14:31:39 +07:00
Thanakorn S
9a50080ae5
init wms
2026-02-19 14:48:40 +07:00
Thanakorn