halobestie-clone

Go to file

ramadhan sjamsani fa7071def5 Phase 3.4: structured rate-limit retry-after + auth error logging

OtpError now carries an optional details object; rate-limit branches in
checkRateLimits compute retry_after_seconds (cooldown delta for OTP_COOLDOWN,
window-roll-out delta for OTP_RATE_LIMIT_PHONE / OTP_RATE_LIMIT_IP) so the
client can disable Kirim OTP / Kirim ulang CTAs with a real countdown.

All four sendAuthError helpers (client, mitra, shared, internal) now surface
err.details and log unhandled (no statusCode) errors at level 50.

New GET /api/shared/config/otp returns the resend cooldown so the OTP screen
can gate the resend countdown without hardcoding.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-04-27 13:43:56 +08:00

.claude

Phase 3 testing fixes: Fastify 5, SSE→WebSocket+FCM, enums, security, session lifecycle

2026-04-09 00:17:25 +08:00

backend

Phase 3.4: structured rate-limit retry-after + auth error logging

2026-04-27 13:43:56 +08:00

client_app

Phase 3: closing-overlay fix + goodbye-composer dedupe

2026-04-27 13:43:19 +08:00

control_center

Phase 3.4: control_center self-managed auth cutover