Spaces:
Sleeping
Sleeping
Commit History
-
Fix: Increase login rate limit to 20 attempts
87a681d
-
Fix: Use persistent /data/uploads directory for Hugging Face
70b46f4
-
Fix: Case-insensitive RBAC + relaxed upload validation + seed role uppercase
1bc01b8 -
Fix: Remove Helmet entirely, use manual security headers without frame-ancestors
aa719f8 -
Fix: Disable CSP and crossOriginEmbedderPolicy for Hugging Face iframe
be69037 -
Production-ready: Security hardening, RBAC, logging, audit, DB indexes, compression
Phase 1 - Security: - Helmet security headers with CSP - Rate limiting (global/login/API) - CORS with env-based config - Secure file upload (block SVG, MIME validation) - Environment validation at startup Phase 2 - RBAC: - Role-based authorization (SUPER_ADMIN/ADMIN/MANAGER/STAFF/USER) - Mutation routes protected with authorize middleware - GET routes remain public Phase 5 - Observability: - Structured logger (JSON/colored) - Request logging with correlation IDs - Failed login attempt tracking - Audit log model and utility Phase 6 - Database: - Added indexes on Project, Skill, Contact, Analytics - AuditLog model for change tracking - Prisma schema optimization Phase 7 - Docker: - Production Dockerfile with --omit=dev - Compression middleware - Health check endpoints (/health, /health/database, /health/storage)9f5a703
-
Initial commit
moustafa781d1e4c