Update: 2026-06-16 01:17:28

backend/loginJwtDriver.php

@@ -6,7 +6,7 @@
 require_once __DIR__ . '/core/bootstrap.php';
 
 header('Content-Type: application/json; charset=utf-8');
-header('Access-Control-Allow-Origin: https://intaleqapp.com');
+header('Access-Control-Allow-Origin: https://siromove.com');
 header('Access-Control-Allow-Methods: POST, OPTIONS');
 header('Access-Control-Allow-Headers: Content-Type, Authorization, X-Device-FP');
 
@@ -63,7 +63,13 @@ try {
     $decPhone = !empty($driver['phone']) ? $encryptionHelper->decryptData($driver['phone']) : null;
     $decNat   = !empty($driver['national_number']) ? $encryptionHelper->decryptData($driver['national_number']) : null;
 
+    // ✅ FIX M-04: تسجيل معلومات تشخيصية عند فشل فك التشفير
     if (empty($decPhone) || empty($decNat)) {
+        securityLog("LoginDriver failed: decryption returned null", [
+            'driver_id' => $driver['id'] ?? 'unknown',
+            'has_phone' => !empty($driver['phone']),
+            'has_nat' => !empty($driver['national_number']),
+        ]);
         unauthorizedDriver();
     }