11 Commits

Include renames

Author	SHA1	Message	Date
Thanakorn	73c680e844	Harden sign-in and password reset ... - OTP attempt limits, constant-time compare, random reference codes - DB-backed rate limits (429) on sign-in, OTP, reset, register, onboarding - one generic sign-in failure message; reset request no longer reveals accounts - no password kept in the session; real status codes on failures	2026-09-24 14:53:40 +07:00
Thanakorn	6b3a590aa9	Make email OTP login off by default	2026-09-14 15:38:36 +07:00
Thanakorn	9afcf072b0	Add OTP_REQUIRED switch for email OTP login	2026-09-14 15:03:16 +07:00
Thanakorn	234814a23c	Seed Demo Data - Rebranding	2026-08-17 13:12:07 +07:00
Thanakorn S	45a78a3fed	login: block concurrent login, single-factor auth for staff/viewer	2026-05-25 09:43:30 +07:00
Thanakorn S	04a683bd02	accounting modules	2026-05-13 15:11:24 +07:00
Thanakorn S	79e66bd354	add forget password	2026-05-12 17:19:22 +07:00
Thanakorn S	e4a35c7fac	gitignore test scripts	2026-05-07 11:44:51 +07:00
Thanakorn S	f6dc9a3278	modify classed and comments	2026-04-29 14:21:09 +07:00
Thanakorn S	d8fd30c961	Login , Register ,and onboarding	2026-04-28 11:59:49 +07:00
Thanakorn S	9a50080ae5	init wms	2026-02-19 14:48:40 +07:00