a620906209/CFDivePlatform
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request 'security(auth): P0 認證安全強化' (#21) from security/auth-p0-hardening into master
Deploy Production / deploy (push) Successful in 36s
Details

Browse Source 
Reviewed-on: #21
This commit was merged in pull request #21.
This commit is contained in:
a620906209
2026-06-01 17:58:24 +00:00
parent 5b13a014be cb9c9a9385
commit a94c2462b8
22 changed files with 502 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
routes/api.php
+3 -3
View File
@@ -28,7 +28,7 @@ Route::get('/diving-offers/{id}/reviews', [ReviewController::class, 'publicList
// 會員註冊／登入
Route::post('/member/register', [AuthController::class, 'registerMember']);
Route::post('/member/login', [AuthController::class, 'loginMember']);
Route::middleware('throttle:5,1')->post('/member/login', [AuthController::class, 'loginMember']);
// Google 第三方登入（僅會員）
Route::get('/auth/google/redirect', [\App\Http\Controllers\API\SocialAuthController::class, 'redirectToGoogle']);
@@ -60,7 +60,7 @@ Route::middleware('auth:sanctum')->post('/reviews/{id}/helpful', [ReviewControll
// 服務提供者註冊／登入
Route::post('/provider/register', [AuthController::class, 'registerProvider']);
Route::post('/provider/login', [AuthController::class, 'loginProvider']);
Route::middleware('throttle:5,1')->post('/provider/login', [AuthController::class, 'loginProvider']);
// 服務提供者專屬 API（需登入）
Route::middleware(['auth:sanctum'])->prefix('provider')->group(function () {
@@ -98,7 +98,7 @@ Route::middleware(['auth:sanctum'])->prefix('provider')->group(function () {
// 管理員註冊／登入
Route::post('/admin/register', [AuthController::class, 'registerAdmin']);
Route::post('/admin/login', [AuthController::class, 'loginAdmin']);
Route::middleware('throttle:3,1')->post('/admin/login', [AuthController::class, 'loginAdmin']);
// 管理員專屬 API（需登入）
Route::middleware(['auth:sanctum', 'admin'])->prefix('admin')->group(function () {
routes/console.php
+1
View File
@@ -10,3 +10,4 @@ Artisan::command('inspire', function () {
Schedule::command('app:expire-pending-bookings')->hourly();
Schedule::command('app:complete-finished-bookings')->dailyAt('00:05');
Schedule::command('sanctum:prune-expired --hours=168')->daily();