Commit Graph

10 Commits

Author SHA1 Message Date
Knee Cola
a6ab35a959 feat: add core security utilities for checksum-based share links
- Add HMAC-SHA256 checksum generation and validation (shareChecksum.ts)
- Add PDF magic bytes validation to prevent file spoofing (pdfValidator.ts)
- Add IP-based rate limiting for upload abuse prevention (uploadRateLimiter.ts)
- Update BillingLocation interface with shareTTL and shareFirstVisitedAt fields
- Add environment variables for share link security and TTL configuration

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2025-12-08 00:14:20 +01:00
Knee Cola
6a86ebd747 Fix per-bill proof of payment field name and add environment config
- Updated uploadProofOfPayment to expect 'proofOfPayment' field name
  instead of 'utilBillsProofOfPayment' for semantic clarity
- Removed old not-found.tsx from deprecated route structure
- Added required environment variables for file upload validation:
  - MAX_BILL_ATTACHMENT_UPLOAD_SIZE_KB=1024
  - MAX_PROOF_OF_PAYMENT_UPLOAD_SIZE_KB=1024
- Updated package-lock.json with peer dependency metadata

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-12-07 13:16:37 +01:00
Knee Cola
7cefe54eb0 security: configured secure mongo pass 2025-11-24 22:17:39 +01:00
Knee Cola
e5ceb59934 Add USE_MOCK_AUTH flag to environment configuration
🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-11-17 14:42:30 +01:00
89eb50b61a supported login via linkedin 2024-02-19 09:11:59 +01:00
e29d813aee db authentication replaced by Google 2024-01-08 15:17:18 +01:00
8367606493 added config for google auth 2024-01-07 13:08:29 +01:00
dc233c8de7 fixed mongodb uri i dotenv 2024-01-06 10:59:57 +01:00
ea92e238b2 configured mongo uri i dotEnv 2024-01-06 10:57:34 +01:00
52d4c35c2e implemented login 2024-01-06 10:50:27 +01:00