From 2678b1571c24465e39536b9a782054d0ae05afdc Mon Sep 17 00:00:00 2001
From: pavlov346346-source <pavlov346346@gmail.com>
Date: Sat, 12 Sep 2026 08:12:11 +0300
Subject: [PATCH] fix: prevent stale auth shell on Timeweb

---
 public/.htaccess | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)
 create mode 100644 public/.htaccess

diff --git a/public/.htaccess b/public/.htaccess
new file mode 100644
index 0000000..4d7c95d
--- /dev/null
+++ b/public/.htaccess
@@ -0,0 +1,19 @@
+<IfModule mod_headers.c>
+  <FilesMatch "^(index\.html|service-worker\.js)$">
+    Header set Cache-Control "no-store, no-cache, must-revalidate, max-age=0"
+    Header set Pragma "no-cache"
+    Header set Expires "0"
+  </FilesMatch>
+
+  <FilesMatch "^(performance\.js|login-signature-v1776\.js|auth-security-v1774\.js)$">
+    Header set Cache-Control "no-store, no-cache, must-revalidate, max-age=0"
+    Header set Pragma "no-cache"
+    Header set Expires "0"
+  </FilesMatch>
+</IfModule>
+
+<IfModule mod_expires.c>
+  ExpiresActive On
+  ExpiresByType text/html "access plus 0 seconds"
+  ExpiresByType application/javascript "access plus 0 seconds"
+</IfModule>