Ho Ngoc Hai 8a86cf42d4 fix(auth): enforce JWT secrets in all environments, not just production ...

validateEnv() previously skipped validation entirely when NODE_ENV !== 'production',
allowing the app to start without JWT_SECRET and JWT_REFRESH_SECRET in dev/staging.
Split required vars into ALWAYS_REQUIRED (JWT secrets) and REQUIRED_IN_PRODUCTION
(infrastructure) so security-critical secrets are validated in every environment.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-04-08 22:44:19 +07:00

..

api

fix(auth): enforce JWT secrets in all environments, not just production

2026-04-08 22:44:19 +07:00

web

feat(metrics): add MetricsService, HttpMetricsInterceptor, and metric constants

2026-04-08 22:38:55 +07:00