Fetching metadata from the HF Docker repository...
-
feat: security audit fixes, performance improvements & global data pipeline
Backend:
- Add RateLimitingFilter (Bucket4j): login 5req/60s, forgot-password 3req/60s
- Add WebSocketAuthInterceptor: validate JWT on HTTP upgrade handshake
- Add BookingExpiryScheduler: auto-cancel PENDING bookings after 30 min
- Fix race condition in FlightSeatService using atomic findAndModify
- Fix race condition in WalletServiceImpl using atomic $inc with balance check
- Fix idempotency in PaymentService: check existing payment before creating Stripe session
- Fix N+1 query in ActivityStatusScheduler using bulkOps
- Fix FlightService: push filters (isDirect, price range) down to MongoDB query
- Fix RoomService: sync Hotel.lowestPrice after every room create/update/delete
- Add pagination support (Page<T>) to FlightRepository, ActivityRepository
- Add @TextIndexed on Hotel.name/address for full-text search
- Add HTTP security headers (HSTS, CSP, X-Frame-Options) to SecurityConfig
- Remove Stripe debug endpoint from StripeWebhookController
- Strengthen JWT secret: require JWT_SECRE…
