Add SMS OTP, harden auth, and fix order/checkout server bugs.

Ship 4-digit OTP with rate-limit attempts, Tehran-safe expiry/rass math, larger JSON body limit for check images, and safer order pricing/status guards. Include rebuilt dist for prebuilt deploy. Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-08 14:55:26 +03:30
parent b121797263
commit 345a4a4708
100 changed files with 1476 additions and 353 deletions
@@ -35,4 +35,4 @@ echo "  npm run start:dev"
 echo ""
 echo "Swagger: http://localhost:3000/api/docs"
 echo "Admin: 09121112222 / admin123"
-echo "OTP:   09121234567 / 123456"
+echo "OTP:   09121234567 / 1234"