iHome Platform Dev Log · Jun 29

Big auth consolidation today: the 14 scattered auth endpoints from the forum era are all deprecated, folded into a unified /api/auth/*. With two sets running in parallel, every new login method had to be written twice, and whoever forgot a set owned the bug. CN phone login switched to password-first with two-layer rate limiting. The same day, 'leaving easily' got filled in: one-click account data export as a ZIP (phone and email masked, three times a month max), and data-retention cleanup became a weekly idempotent job. Also dug up a typing disease: hand-written table definitions missing the Relationships field made postgrest-js infer every insert/update as never — previously papered over with as any. Once fixed, three as-any casts came out on the spot.