docs(todo): mark billing batch WS auth as completed

2025-09-04 15:11:32 -05:00
parent 41ffbc1430
commit b32b2710d0
1 changed files with 1 additions and 0 deletions
--- a/TODO.md
+++ b/TODO.md
@@ -43,6 +43,7 @@
 - [x] Add refresh token rotation consistency across all endpoints
 - [x] Implement multi-factor authentication for admin accounts (SKIPPED - local hosting)
 - [x] Add password expiration and forced reset policies
+- [x] Restrict WS subscriptions for billing batch progress to initiating user or admins

 ### **Security Middleware** ✅
 - [x] Implement rate limiting on all API endpoints (especially search)