chore: add new features

backend/gestion/handlers/auth.go

@@ -80,7 +80,7 @@ type ProfileResponse struct {
 
 var (
 	clientTokenDuration = 5 * time.Hour
-	adminTokenDuration  = 2 * time.Hour
+	adminTokenDuration  = 10 * time.Hour
 	userJWTSecret       = []byte(os.Getenv("USER_JWT_SECRET"))  // ✅ Pour clients
 	adminJWTSecret      = []byte(os.Getenv("ADMIN_JWT_SECRET")) // ✅ Pour admin/cabine/livreur
 )
@@ -287,7 +287,7 @@ func LoginClient(c *gin.Context) {
 	database := c.MustGet("database").(*db.Database)
 
 	client, err := database.GetClientByUsername(req.Username)
-	if err != nil {
+	if err != nil || client == nil {
 		log.Printf("❌ [LOGIN_CLIENT] Client non trouvé: %s", req.Username)
 		c.JSON(http.StatusUnauthorized, gin.H{"error": "Identifiants invalides"})
 		return
@@ -327,13 +327,13 @@ func LoginClient(c *gin.Context) {
 		TokenType:   "Bearer",
 		ExpiresIn:   int(clientTokenDuration.Seconds()),
 		User: gin.H{
-			"id":                  client.ID,
-			"username":            client.Username,
-			"nom":                 client.Nom,
-			"prenom":              client.Prenom,
-			"telephone":           client.Telephone,
-			"role":                "client",
-			"session_id":          sessionID,
+			"id":                   client.ID,
+			"username":             client.Username,
+			"nom":                  client.Nom,
+			"prenom":               client.Prenom,
+			"telephone":            client.Telephone,
+			"role":                 "client",
+			"session_id":           sessionID,
 			"must_change_password": client.MustChangePassword,
 		},
 	})