v1.2.6l - feat: Add comprehensive MFA utilities including TOTP, SMS, …

v1.2.6l - feat: Add comprehensive MFA utilities including TOTP, SMS, …

Author: GenRevo89

app/api/upload/route.ts

@@ -11,7 +11,7 @@ import { systemLogger } from "@/lib/logger";
 // Generic Azure Blob upload endpoint used by Invoice FileInput and other generic uploads.
 // Accepts multipart/form-data with field "file".
 
-// Increase Next.js body size limit from default 1MB to 2MB
+// Body size limit is set in next.config.js
 export const maxDuration = 30; // Allow up to 30s for large uploads
 export const dynamic = "force-dynamic";
 

lib/mfa-utils.ts

@@ -67,7 +67,7 @@ export const sendMfaSms = async (phone: string, code: string) => {
 // ─── WebAuthn (Fingerprint / Biometrics) ─────────────────────────────────────
 
 const rpName = process.env.NEXT_PUBLIC_APP_NAME || "Basalt CRM";
-const origin = process.env.NEXT_PUBLIC_APP_URL || "http://localhost:3000";
+const origin = (process.env.NEXT_PUBLIC_APP_URL || "http://localhost:3000").replace(/\/+$/, "");
 // Auto-derive rpID from the origin hostname (e.g. "crm.basalthq.com" or "localhost")
 const rpID = process.env.NEXT_PUBLIC_AUTH_DOMAIN || (() => {
     try { return new URL(origin).hostname; } catch { return "localhost"; }

next.config.js

@@ -4,6 +4,7 @@ const nextConfig = {
     serverActions: {
       bodySizeLimit: '4mb',
     },
+    routeHandlerBodySizeLimit: '4mb',
   },
   // TypeScript errors will now fail the build (safety net removed)
   // typescript: { ignoreBuildErrors: true },