feat: production hardening - CORS whitelist, strong password, tokenVersion revoke, VIP card hashing, admin secret

2026-05-10 22:53:32 +08:00
parent 5b23c88df9
commit 21709e5d97
9 changed files with 299 additions and 69 deletions
--- a/src/utils/jwt.ts
+++ b/src/utils/jwt.ts
@@ -12,6 +12,7 @@ export interface JwtPayload {
  email: string;
  isVip: boolean;
  vipLevel: number;
+  tokenVersion: number;
 }

 /**