fix(admin): fresh SSR reads, atomic user delete + sanitized errors, cookie-rotation in middleware, no-store on admin APIs

2026-05-31 13:15:56 +02:00
parent 61bf6c013c
commit 535b2ef202
23 changed files with 180 additions and 95 deletions
@@ -1,6 +1,6 @@
-import { NextResponse } from 'next/server';
 import { requireAdminApi } from '@/lib/auth/admin-guard';
 import { computeMetrics } from '@/lib/admin/metrics';
+import { jsonNoStore } from '@/lib/admin/response';

 export const runtime = 'nodejs';
 export const dynamic = 'force-dynamic';
@@ -10,5 +10,5 @@ export async function GET() {
  if (!auth.ok) return auth.response;

  const metrics = await computeMetrics();
-  return NextResponse.json(metrics);
+  return jsonNoStore(metrics);
 }