Ho Ngoc Hai 1ebdc5f0b3 fix: auth cookies cross-origin, async params, CSRF/web-vitals errors ...

- Set SameSite=lax for auth & CSRF cookies in development (cross-port)
- Set refresh_token cookie path to / (was /auth, preventing cross-port send)
- Await params in Next.js 15 async server components (layout, listings, agents)
- Add CSRF token to web-vitals POST requests
- Fix: 401 Unauthorized on all authenticated API calls from web app
- Fix: CSRF token missing on POST requests from different port
- Fix: params.locale sync access warning in generateMetadata

Co-Authored-By: Claude Opus 4 (1M context) <noreply@anthropic.com>

2026-04-13 11:24:45 +07:00

..

__tests__

fix(lint): resolve all 24 ESLint errors across web, api and e2e

2026-04-11 00:42:00 +07:00

hooks

feat: add MFA/TOTP auth, PII encryption, agents/leads/inquiries modules, and comprehensive tests

2026-04-11 23:43:20 +07:00

validations

feat(web): add Property Valuation UI with AVM integration

2026-04-09 00:17:12 +07:00

admin-api.ts

fix(auth): migrate tokens from localStorage to httpOnly cookies + CSRF hardening

2026-04-08 06:25:11 +07:00

agents-api.ts

feat(agents): add public agent profile page at /agents/[id]

2026-04-11 00:16:19 +07:00

agents-server.ts

feat(agents): add public agent profile page at /agents/[id]

2026-04-11 00:16:19 +07:00

analytics-api.ts

feat(analytics): add Analytics module with market reports, price index, and AVM integration

2026-04-08 03:16:26 +07:00

api-client.ts

docs: add K6 endpoints summary and quick start guide

2026-04-09 01:35:29 +07:00

auth-api.ts

fix(auth): migrate tokens from localStorage to httpOnly cookies + CSRF hardening

2026-04-08 06:25:11 +07:00

auth-store.ts

fix: production readiness — resolve build, lint, and code quality issues

2026-04-08 07:15:06 +07:00

comparison-api.ts

feat(web): add property comparison page with side-by-side view

2026-04-10 23:55:50 +07:00

comparison-store.ts

feat(web): add property comparison page with side-by-side view

2026-04-10 23:55:50 +07:00

currency.ts

feat(web): centralise Vietnamese price formatting across all pages

2026-04-10 23:33:31 +07:00

image-blur.ts

feat(web): add saved searches, image lightbox, and web vitals tracking

2026-04-11 01:39:22 +07:00

inquiries-api.ts

feat: add MFA/TOTP auth, PII encryption, agents/leads/inquiries modules, and comprehensive tests

2026-04-11 23:43:20 +07:00

leads-api.ts

feat: add MFA/TOTP auth, PII encryption, agents/leads/inquiries modules, and comprehensive tests

2026-04-11 23:43:20 +07:00

listings-api.ts

feat: comprehensive seed, Lucide icons, grouped dashboard nav, API fixes

2026-04-13 11:13:04 +07:00

listings-server.ts

feat(web): add SEO optimization — JSON-LD, dynamic sitemap, meta tags for listings

2026-04-10 20:38:28 +07:00

payment-api.ts

feat(web): add Agent Profile, KYC, Subscription & Payment dashboard pages

2026-04-08 16:33:50 +07:00

profile-api.ts

feat(web): add Agent Profile, KYC, Subscription & Payment dashboard pages

2026-04-08 16:33:50 +07:00

query-client.ts

feat(web): add QueryErrorBoundary and use real map coordinates

2026-04-10 17:58:35 +07:00

saved-search-api.ts

feat(web): add saved searches, image lightbox, and web vitals tracking

2026-04-11 01:39:22 +07:00

subscription-api.ts

feat(web): add Agent Profile, KYC, Subscription & Payment dashboard pages

2026-04-08 16:33:50 +07:00

utils.ts

feat(notifications): add multi-channel notification module with Email, FCM, templates, and event listeners

2026-04-08 01:42:17 +07:00

valuation-api.ts

feat(web): add Property Valuation UI with AVM integration

2026-04-09 00:17:12 +07:00

web-vitals.ts

fix: auth cookies cross-origin, async params, CSRF/web-vitals errors

2026-04-13 11:24:45 +07:00