4 Commits

Author	SHA1	Message	Date
David Nguyen	8671f269e8	fix: lint project (#2693)	2026-05-08 16:04:22 +10:00
Lucas Smith	653ab3678a	feat: better ratelimiting (#2520) ... Replace hono-rate-limiter with a Prisma/PostgreSQL bucketed counter approach that works correctly across multiple instances without sticky sessions. - Add RateLimit model with composite PK (key, action, bucket) and atomic upsert - Create rate limit factory with window parsing, bucket computation, and fail-open - Define auth-tier and API-tier rate limit instances - Add Hono middleware, rateLimitResponse helper, and tRPC assertRateLimit helper - Wire rate limit headers through AppError constructor (was declared but never assigned) - Apply rate limits to auth routes (email-password, passkey), tRPC routes (2FA email, link org account), API routes, and file upload endpoints - Add cleanup cron job for expired rate limit rows (batched delete every 15 min) - Remove hono-rate-limiter dependency	2026-02-20 12:23:02 +11:00
David Nguyen	7f09ba72f4	feat: add envelopes (#2025) ... This PR is handles the changes required to support envelopes. The new envelope editor/signing page will be hidden during release. The core changes here is to migrate the documents and templates model to a centralized envelopes model. Even though Documents and Templates are removed, from the user perspective they will still exist as we remap envelopes to documents and templates.	2025-10-14 21:56:36 +11:00
Lucas Smith	995bc9c362	feat: support 2fa for document completion (#2063) ... Adds support for 2FA when completing a document, also adds support for using email for 2FA when no authenticator has been associated with the account.	2025-10-06 16:17:54 +11:00