Commit Graph
7 Commits
Author SHA1 Message Date
Thanakorn 73c680e844 Harden sign-in and password reset
- OTP attempt limits, constant-time compare, random reference codes
- DB-backed rate limits (429) on sign-in, OTP, reset, register, onboarding
- one generic sign-in failure message; reset request no longer reveals accounts
- no password kept in the session; real status codes on failures
2026-09-24 14:53:40 +07:00
Thanakorn S 5ca6b49fd0 code audit fixes: require_once, issue flow, role guards 2026-05-23 17:06:08 +07:00
Thanakorn S 8ec2e89f79 merge accounting app and solve conflict 2026-05-20 13:22:17 +07:00
Thanakorn S 91f8bb854f review code pattern consistency 2026-05-20 13:07:57 +07:00
Thanakorn S 4433ef184e fix registration 2026-05-13 16:15:19 +07:00
Thanakorn S f6dc9a3278 modify classed and comments 2026-04-29 14:21:09 +07:00
Thanakorn S d8fd30c961 Login , Register ,and onboarding 2026-04-28 11:59:49 +07:00