Tiago Yamamoto
668156fb48
Rename backend folder to backend-old
2026-01-16 10:51:52 -03:00
Tiago Yamamoto
8ab398723d
Relax CSP for Swagger docs
2025-12-21 22:10:03 -03:00
Tiago Yamamoto
fd237cd9c4
fix(backend): resolving hardcoded values and test failures
...
Updates .env.example with missing variables. Adds missing security headers in middleware. Fixes repository tests including timezone issues and sqlmock expectations.
2025-12-21 21:43:50 -03:00
Tiago Yamamoto
e73d423b16
refactor: move seeder to api, improve coverage and security
2025-12-20 11:13:53 -03:00
Tiago Yamamoto
beffeb8268
feat(security): add rate limiting and security headers middleware
...
Rate Limiting (ratelimit.go):
- Token bucket algorithm per IP
- Default: 100 requests/minute
- X-Forwarded-For support
- Cleanup for stale buckets
- 7 tests (ratelimit_test.go)
Security Headers (security.go):
- X-Content-Type-Options: nosniff
- X-Frame-Options: DENY
- X-XSS-Protection: 1; mode=block
- Content-Security-Policy: default-src 'none'
- Referrer-Policy: strict-origin-when-cross-origin
- Cache-Control: no-store, max-age=0
Middleware coverage: 97.3% -> 95.8% (new code added)
2025-12-20 08:41:36 -03:00
