4 Commits

Author	SHA1	Message	Date
gch3n	21709e5d97	feat: production hardening - CORS whitelist, strong password, tokenVersion revoke, VIP card hashing, admin secret	2026-05-10 22:53:32 +08:00
Stevenma	111e61431b	fix: VIP session-status stale token; add missing API routes (popups, jiahao, update-config, /api/version)	2026-05-10 17:28:14 +08:00
Chen Gu	f09cadf1a7	fix: remove hardcoded secrets from docker-compose.yml	2026-05-10 16:21:54 +08:00
Chen Gu	b84f111e8f	chore: mqsrv backend	2026-05-09 00:52:04 +08:00