Ho Ngoc Hai
1fbe2f4e73
feat: add MFA/TOTP auth, PII encryption, agents/leads/inquiries modules, and comprehensive tests
...
- Add TOTP-based MFA with setup, verify, disable, backup codes, and challenge flow
- Add PII field encryption middleware with AES-256-GCM and deterministic search hashes
- Add agents, inquiries, and leads domain modules with entities, events, value objects
- Add web dashboard pages for inquiries and leads with detail dialogs
- Add 30+ component tests (valuation, charts, listings, search, providers, UI)
- Add Prisma migrations for encryption hash columns and MFA TOTP support
- Fix all ESLint errors (unused imports, duplicate imports, lint auto-fixes)
- Update dependencies and lock file
- Clean up obsolete exploration/QA docs, add audit documentation
Co-Authored-By: Paperclip <noreply@paperclip.ing >
2026-04-11 23:43:20 +07:00
Ho Ngoc Hai
da10ac64c6
test(e2e): update all E2E specs for latest API and fixtures
...
Update 17 E2E test files including admin, auth, inquiries, listings,
payments, search, subscriptions, and MCP specs. Update listings fixture
and global setup to align with latest schema changes.
Co-Authored-By: Paperclip <noreply@paperclip.ing >
2026-04-11 01:40:45 +07:00
Ho Ngoc Hai
bac3313873
test(auth,payments,subs): add 58 unit tests for critical auth, payment, and subscription paths
...
Cover auth handlers (RegisterUser, LoginUser, RefreshToken), TokenService
(token rotation, reuse attack detection), payment callback edge cases
(duplicate/concurrent callbacks, multi-provider), subscription lifecycle
transitions (expire, pastDue, renew), and throttler proxy guard.
Co-Authored-By: Paperclip <noreply@paperclip.ing >
2026-04-08 13:49:19 +07:00
