From dedef1370b5b16176f7d0eb9e21a259e4946db3b Mon Sep 17 00:00:00 2001
From: ISMAIL MASSERAN <topaz@ISMAILs-Macbook.local>
Date: Thu, 16 Jul 2026 11:55:10 +0800
Subject: [PATCH] DONE: fix bypass password on production not working

---
 be/.env.development                         | 61 +++++++++-----
 be/.env.staging                             | 88 ---------------------
 be/app/Providers/FortifyServiceProvider.php |  2 +-
 3 files changed, 44 insertions(+), 107 deletions(-)
 delete mode 100644 be/.env.staging

diff --git a/be/.env.development b/be/.env.development
index 74b36c6..4712b3a 100644
--- a/be/.env.development
+++ b/be/.env.development
@@ -1,9 +1,12 @@
-APP_NAME="SUTERA 3.0 Dev"
+APP_NAME="MYKOPKB 1.0"
 APP_ENV=local
 APP_KEY=base64:0dM5HYEFRu9P6ni51QTUZm5mQ23znc/s/aebLTRUGxU=
 APP_DEBUG=true
 APP_TIMEZONE=Asia/Kuala_Lumpur
 APP_URL=http://localhost
+FRONTEND_URL=http://localhost:5173
+
+TELESCOPE_ENABLED=true
 
 APP_LOCALE=en
 APP_FALLBACK_LOCALE=en
@@ -24,8 +27,8 @@ LOG_LEVEL=debug
 DB_CONNECTION=pgsql
 DB_HOST=pgsql
 DB_PORT=5432
-DB_DATABASE=sutera
-DB_USERNAME=suterauser
+DB_DATABASE=mykopkb
+DB_USERNAME=mykopkbuser
 DB_PASSWORD=password
 
 SESSION_DRIVER=redis
@@ -38,8 +41,11 @@ BROADCAST_CONNECTION=log
 FILESYSTEM_DISK=local
 QUEUE_CONNECTION=database
 
+HORIZON_WORKER_MEMORY=512
+HORIZON_WORKER_TIMEOUT=3600
+
 CACHE_STORE=redis
-CACHE_PREFIX=sutera_cache
+CACHE_PREFIX=mykopkb_cache
 
 MEMCACHED_HOST=memcached
 
@@ -54,8 +60,9 @@ MAIL_HOST=mailpit
 MAIL_PORT=1025
 MAIL_USERNAME=null
 MAIL_PASSWORD=null
-MAIL_FROM_ADDRESS="hello@example.com"
+MAIL_FROM_ADDRESS="no-reply@army.mil.my"
 MAIL_FROM_NAME="${APP_NAME}"
+MAIL_LOGO_PATH="images/logo/logo-kopkb-letterhead.svg"
 
 AWS_ACCESS_KEY_ID=
 AWS_SECRET_ACCESS_KEY=
@@ -73,18 +80,6 @@ VITE_APP_NAME="${APP_NAME}"
 EXTERNAL_API_TOKEN="eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOlsibWJzcC1yZXNvdXJjZUlkIl0sInRpbWVvdXRQZXJpb2QiOjkwMCwidXNlcl9uYW1lIjoic3BhLXVzZXIiLCJzY29wZSI6WyJyZWFkIiwid3JpdGUiXSwiZXhwIjoxNzI4NTgzNjEyLCJqdGkiOiJjMmU2OTkxOS0yZDU3LTQ5YmYtYTVmZS1lZjVmMzIyNDZkZDIiLCJjbGllbnRfaWQiOiJzcGEtY2xpZW50In0.LE2byaRzsYkchzI4ox9Gz2u6jNmTqZQa-_ttR2PY8e8"
 EXTERNAL_API_BASE_URL=http://20.11.32.134/rest/td/gasset/asset
 
-SSO_SECRET="Y6g#Rb@Km=Nz]o^X+fEC~<W/LP%qh;M}9T&v!["
-SSO_VALIDATION_URL=http://host.docker.internal:8080/api/sso-validate
-SSO_MAX_ATTEMPTS=5
-SSO_TOKEN_EXPIRATION=300
-SSO_AUTO_ACTIVATE_USERS=true
-SSO_LOG_ACTIVITIES=true
-SSO_CONNECTION_TIMEOUT=10
-SSO_RESPONSE_TIMEOUT=30
-SSO_PROXY_URL=http://20.9.91.1:3128
-SSO_ENABLE_FALLBACK=true
-SSO_PROXY_ENABLED=false
-
 SANCTUM_STATEFUL_DOMAINS=http://localhost
 
 BLOCK_API_TOOLS_IN_PRODUCTION=true
@@ -97,5 +92,35 @@ ENABLE_API_KEY_AUTH=true
 API_VALID_KEYS=86f58825e5c1e0872d8786092d47e3bd,6461fc5390660c55dc47bdfcd85ed9ae
 API_LOG_KEY_USAGE=true
 
+# HttpOnly Sanctum token cookie (set on api.* domain)
+AUTH_COOKIE_NAME=auth_token
+AUTH_COOKIE_LIFETIME=360
+AUTH_COOKIE_SECURE=true
+AUTH_COOKIE_SAME_SITE=lax
+AUTH_COOKIE_EXPOSE_TOKEN=false
+
+# Browsershot (PDF generation via headless Chrome + Puppeteer in be/)
+# Required in Docker/Sail. After first sail up: sail npm install && sail npx puppeteer browsers install chrome-headless-shell
+BROWSERSHOT_NO_SANDBOX=true
+# BROWSERSHOT_NODE_BINARY=
+# BROWSERSHOT_NPM_BINARY=
+# BROWSERSHOT_NODE_MODULE_PATH=
+# BROWSERSHOT_CHROME_PATH=
+# BROWSERSHOT_TIMEOUT=60
+
 PUBLIC_PROFILE_TOKEN_TTL_DAYS=7
-FRONTEND_URL=https://mykopkb.koppkb.com
\ No newline at end of file
+
+EMAIL_VERIFICATION_EXPIRE_MINUTES=60
+EMAIL_VERIFICATION_REDIRECT_PATH=/profile-overview-2
+
+PHONE_VERIFICATION_OTP_EXPIRY_MINUTES=10
+PHONE_VERIFICATION_TOKEN_EXPIRY_MINUTES=30
+PHONE_VERIFICATION_OTP_MAX_ATTEMPTS=5
+
+SMS_DRIVER=log
+ONEWAYSMS_BASE_URL=http://gateway.onewaysms.com.my:10001/api.aspx
+ONEWAYSMS_API_USERNAME=API7LO0ELJTAU
+ONEWAYSMS_API_PASSWORD=API7LO0ELJTAU7LO0E
+ONEWAYSMS_SENDER_ID=INFO
+
+EXTERNAL_SYSTEM_SSO_ISSUER=mykopkb
\ No newline at end of file
diff --git a/be/.env.staging b/be/.env.staging
deleted file mode 100644
index 42e32f9..0000000
--- a/be/.env.staging
+++ /dev/null
@@ -1,88 +0,0 @@
-APP_NAME="SUTERA 3.0"
-APP_ENV=staging
-APP_KEY=base64:9vnA0vvAweC8C+/WKyEDOziWp4QPsdKZ/blgDZXIbKQ=
-APP_DEBUG=false
-APP_TIMEZONE=Asia/Kuala_Lumpur
-APP_URL=https://sutera.koppkb.com
-
-APP_LOCALE=en
-APP_FALLBACK_LOCALE=en
-APP_FAKER_LOCALE=en_US
-
-APP_MAINTENANCE_DRIVER=file
-APP_MAINTENANCE_STORE=database
-
-PHP_CLI_SERVER_WORKERS=8
-
-BCRYPT_ROUNDS=12
-
-LOG_CHANNEL=stack
-LOG_STACK=single
-LOG_DEPRECATIONS_CHANNEL=null
-LOG_LEVEL=error
-
-DB_CONNECTION=pgsql
-DB_HOST=pgsql
-DB_PORT=5432
-DB_DATABASE=sutera
-DB_USERNAME=suterauser
-DB_PASSWORD=Aretus@2025
-DB_ROOT_PASSWORD=Sutera_Staging@root_2025
-
-SESSION_DRIVER=redis
-SESSION_LIFETIME=60
-SESSION_ENCRYPT=true
-SESSION_PATH=/
-SESSION_DOMAIN=null
-
-BROADCAST_CONNECTION=log
-FILESYSTEM_DISK=local
-QUEUE_CONNECTION=redis
-
-CACHE_STORE=redis
-CACHE_PREFIX=sutera_cache
-CACHE_DRIVER=redis
-
-MEMCACHED_HOST=memcached
-
-REDIS_CLIENT=phpredis
-REDIS_HOST=redis
-REDIS_PORT=6379
-REDIS_PASSWORD=sutera_redis@2025
-REDIS_DB=0
-
-MAIL_MAILER=smtp
-MAIL_SCHEME=null
-MAIL_HOST=mailpit
-MAIL_PORT=1025
-MAIL_USERNAME=null
-MAIL_PASSWORD=null
-MAIL_FROM_ADDRESS="hello@example.com"
-MAIL_FROM_NAME="${APP_NAME}"
-
-AWS_ACCESS_KEY_ID=
-AWS_SECRET_ACCESS_KEY=
-AWS_DEFAULT_REGION=us-east-1
-AWS_BUCKET=
-AWS_USE_PATH_STYLE_ENDPOINT=false
-
-VITE_APP_NAME="${APP_NAME}"
-# VITE_PUSHER_APP_KEY="${PUSHER_APP_KEY}"
-# VITE_PUSHER_HOST="${PUSHER_HOST}"
-# VITE_PUSHER_PORT="${PUSHER_PORT}"
-# VITE_PUSHER_SCHEME="${PUSHER_SCHEME}"
-# VITE_PUSHER_APP_CLUSTER="${PUSHER_APP_CLUSTER}"
-
-EXTERNAL_API_TOKEN="eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOlsibWJzcC1yZXNvdXJjZUlkIl0sInRpbWVvdXRQZXJpb2QiOjkwMCwidXNlcl9uYW1lIjoic3BhLXVzZXIiLCJzY29wZSI6WyJyZWFkIiwid3JpdGUiXSwiZXhwIjoxNzI4NTgzNjEyLCJqdGkiOiJjMmU2OTkxOS0yZDU3LTQ5YmYtYTVmZS1lZjVmMzIyNDZkZDIiLCJjbGllbnRfaWQiOiJzcGEtY2xpZW50In0.LE2byaRzsYkchzI4ox9Gz2u6jNmTqZQa-_ttR2PY8e8"
-EXTERNAL_API_BASE_URL=http://20.11.32.134/rest/td/gasset/asset
-
-SSO_SECRET="Y6g#Rb@Km=Nz]o^X+fEC~<W/LP%qh;M}9T&v!["
-SSO_VALIDATION_URL=http://host.docker.internal:8080/api/sso-validate
-SSO_MAX_ATTEMPTS=5
-SSO_TOKEN_EXPIRATION=300
-SSO_AUTO_ACTIVATE_USERS=true
-SSO_LOG_ACTIVITIES=true
-SSO_CONNECTION_TIMEOUT=10
-SSO_RESPONSE_TIMEOUT=30
-SSO_PROXY_URL=http://20.9.91.1:3128
-SSO_ENABLE_FALLBACK=true
\ No newline at end of file
diff --git a/be/app/Providers/FortifyServiceProvider.php b/be/app/Providers/FortifyServiceProvider.php
index d1d4f49..d6bbc65 100644
--- a/be/app/Providers/FortifyServiceProvider.php
+++ b/be/app/Providers/FortifyServiceProvider.php
@@ -106,7 +106,7 @@ class FortifyServiceProvider extends ServiceProvider
                 $failLogin();
             }
 
-            $shouldBypassPassword = config('app.env', 'local');
+            $shouldBypassPassword = app()->environment('local');
 
             if (! $shouldBypassPassword && ! Hash::check($request->password, $user->password)) {
                 $failLogin();