chore: auth gaps docs

This commit is contained in:
2026-03-13 23:45:36 +03:00
parent 5db211dda9
commit 38e5ece96f
3 changed files with 25 additions and 2 deletions
+2 -2
View File
@@ -4,8 +4,8 @@
- Authentica OTP integration is implemented; Moyasar capture/refund are TODOs.
- External calls (OTP, notifications, payment gateway) run synchronously in request/response paths, increasing latency risk.
- Cross-app coupling (bookings ↔ notifications ↔ accounts/payments) will get harder to evolve without clearer service boundaries.
- Phone-first auth works, but `USERNAME_FIELD` is email; align identifier strategy to avoid future auth confusion.
- Phone-first auth is in place with `USERNAME_FIELD = "phone_number"`, but endpoint/admin/domain alignment is still incomplete and needs hardening.
## Near-Term Focus
- finalize otp testing
- work on authentication and complete it
- work on authentication and complete it