Security i Audit

Static demo (HTML+JS) sa dummy podacima. Ne čuva podatke osim “login” flag-a u localStorage.

Logged in:

—

Enforce 2FA for admins

Session timeout (30 min)

IP allowlist

Rate limiting for admin APIs

Preporuka

Za produkciju: centralizovan audit log + SIEM eksport + incident runbook.

Time	Actor	Action	Target	IP