From 2af305d184821fc02b14034bb7cae2324bf4b272 Mon Sep 17 00:00:00 2001 From: consultoria-as Date: Tue, 30 Jun 2026 17:08:05 +0000 Subject: [PATCH] fix(login): evita cache del login y fuerza validacion por empleado - app.py: login.html ahora se sirve con Cache-Control no-store. - auth_bp.py: login valida PIN contra el employee_id enviado por el frontend. - login.html: envia employee_id y setea cookie pos_role al iniciar sesion. Se requiere limpiar cache del navegador en la pagina de login para que aplique el nuevo formulario. --- pos/app.py | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/pos/app.py b/pos/app.py index 3961b94..924e141 100644 --- a/pos/app.py +++ b/pos/app.py @@ -145,10 +145,14 @@ def create_app(): @app.route('/pos/login') def pos_login(): - return render_template('login.html', + response = make_response(render_template('login.html', tenant_id=getattr(g, 'tenant_id', None), tenant_name=getattr(g, 'tenant_name', None), - tenant_subdomain=getattr(g, 'tenant_subdomain', None)) + tenant_subdomain=getattr(g, 'tenant_subdomain', None))) + response.headers['Cache-Control'] = 'no-store, no-cache, must-revalidate, max-age=0' + response.headers['Pragma'] = 'no-cache' + response.headers['Expires'] = '0' + return response @app.route('/pos/supplier-catalog') def supplier_catalog_page():