أمان الحسابات وتنبيهات تسجيل الدخول عبر واتساب

// Trigger security alert on suspicious login
async function sendSecurityAlert(user, event) {
  const message = `🔐 New login to your account from ${event.device} in ${event.city}.
  
If this wasn't you, reply BLOCK immediately.
Time: ${event.timestamp}
IP: ${event.ip}

– YourApp Security Team`;

  const response = await fetch("https://api.nabdaotp.com/api/v1/messages/send", {
    method: "POST",
    headers: {
      "Content-Type": "application/json",
      "Authorization": `Bearer ${instanceToken}`
    },
    body: JSON.stringify({
      phone: user.phone,  // e.g. "+9647701234567"
      message: message
    })
  });

  if (response.ok) {
    await logSecurityEvent(user.id, "login_alert_sent", event);
  }

  return response.ok;
}

// Hook into your auth system
app.post("/auth/login", async (req, res) => {
  const user = await authenticateUser(req.body);
  
  // Send instant WhatsApp alert
  await sendSecurityAlert(user, {
    device: req.headers["user-agent"],
    city: req.geo.city,
    ip: req.ip,
    timestamp: new Date().toISOString()
  });
  
  res.json({ success: true });
});