feat: harden admin auth and ticket workflows

- add rotating admin refresh tokens and password gates\n- expand ticket galleries, exports, and client resources\n- improve IP allocation auditing and dashboard data\n- enforce encrypted client access tokens on public routes
2026-10-16 17:00:55 +07:00
parent 0cdf224309
commit 0b08689ea4
52 changed files with 1421 additions and 118 deletions
@@ -20,6 +20,7 @@ Route::prefix('v1')
    ->group(function () {
        Route::prefix('administrator')->group(function () {
            Route::post('login', [AuthController::class, 'login'])->middleware(['throttle:30,1', 'turnstile']);
+            Route::post('refresh', [AuthController::class, 'refresh'])->middleware('throttle:30,1');

            Route::middleware('api.auth:admin')->group(function () {
                require __DIR__.'/api/admin/auth.php';