 Cheng Zhou
|
74feca4467
|
feat: harden auth and study workflows
- replace plaintext login and unlock requests with RSA-OAEP/AES-GCM encrypted payloads
- add login challenge replay protection, production RSA key validation, and auth tests
- wire compose to environment-driven dev/prod settings without committing local secrets
- update setup-config smoke scripts and Postman docs for encrypted login
- add visit schedule migrations/tests and update study/subject setup workflows
|
2026-05-08 22:16:43 +08:00 |
|