9 Commits

Include renames

Author	SHA1	Message	Date
Thanakorn	73c680e844	Harden sign-in and password reset ... - OTP attempt limits, constant-time compare, random reference codes - DB-backed rate limits (429) on sign-in, OTP, reset, register, onboarding - one generic sign-in failure message; reset request no longer reveals accounts - no password kept in the session; real status codes on failures	2026-09-24 14:53:40 +07:00
Thanakorn	cf8106771b	Make onboarding SMTP optional when OTP is off	2026-09-14 15:27:01 +07:00
Thanakorn	5d021d7683	Accept uppercase channel names in onboarding and company settings	2026-09-14 13:31:26 +07:00
Thanakorn S	9e200d31fe	Security hardening: invited user onboarding flow (C1–N7)	2026-05-26 10:18:40 +07:00
Thanakorn S	5ca6b49fd0	code audit fixes: require_once, issue flow, role guards	2026-05-23 17:06:08 +07:00
Thanakorn S	6eeebfeacb	1) user invitation 2) app access control 3) txn quota guard	2026-05-21 11:42:47 +07:00
Thanakorn S	91f8bb854f	review code pattern consistency	2026-05-20 13:07:57 +07:00
Thanakorn S	f6dc9a3278	modify classed and comments	2026-04-29 14:21:09 +07:00
Thanakorn S	d8fd30c961	Login , Register ,and onboarding	2026-04-28 11:59:49 +07:00