tehran_taj

Files

T

s.esmaeiliandClaude Opus 5.5 1c850216e9 fix(security): no dev key, demo seed or open CORS in production (SEC-04, SEC-05)

- production refuses to boot without JWT_SECRET instead of signing
  admin tokens with the published development key
- CORS_ORIGINS restricts browser callers; blank keeps allow-all with a
  production warning so a running deployment is not cut off
- the boot-time seed creates only roles and permissions in production;
  the demo customers, orders, debt and known-password accounts need
  SEED_DEMO_DATA=true

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-08 11:00:45 +03:30

parity

fix(security): no dev key, demo seed or open CORS in production (SEC-04, SEC-05)

2026-10-08 11:00:45 +03:30

ACCOUNTING-INTEGRATION-PLAN.md

feat: accounting integration (D27), SMS relay driver (D26), rebuild user apps

2026-10-06 16:48:36 +03:30

ADMIN-PORT-PLAN.md

admin-panel: fix CSS bugs and dedupe scoped grid utilities

2026-09-14 15:09:11 +03:30

CHANGELOG-PORT-HISTORY.md

feat: complete admin panel and backend admin api migration