Ho Ngoc Hai be0deddeed fix(security): harden auth — rate limiting, admin audit logging, JWT aud/iss ...

- Add @Throttle (5 req/hour per IP) on register, login, refresh endpoints
- Add audit logging in RolesGuard for failed admin access attempts (userId, role, IP, action)
- Add audience ('goodgo-api') and issuer ('goodgo-platform') claims to JWT tokens
- Validate aud/iss in JwtStrategy to prevent cross-service token reuse

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-04-08 06:17:02 +07:00

..

api

fix(security): harden auth — rate limiting, admin audit logging, JWT aud/iss

2026-04-08 06:17:02 +07:00

web

feat(web): build agent dashboard with analytics charts and listing management

2026-04-08 05:20:28 +07:00