Production Tracking System

Work order management system for a utility contractor, covering crews, vehicles, contracts and date-resolved item pricing, secured by a passwordless session layer and running in production with real users.

• —Passwordless OTP authentication with progressive lockout on failed attempts
• —Single active session per user, enforced by IP binding with hardware-fingerprint fallback
• —Middleware with 12 sequential checks: distributed rate limiting, IP blocklist, browser-close and inactivity detection, forced logout, role revalidation and CSP nonce
• —Five-role permission system with per-contract scoping for administrators, enforced in both middleware and RLS policies
• —Email alerts on new device or location, with one-use 24-hour account-blocking token
• —Work order lifecycle with atomic internal code generation and full state history
• —Date-resolved item pricing over overlapping price lots, where the most recent covering lot wins
• —Private file storage for work order sketches served through on-demand signed URLs
• —Audit logging of every sensitive action plus a separate accounting ledger for price changes
• —Python tooling for DEV to PROD schema diffing and migration generation, production log analysis, and spreadsheet price-list normalization