saveinmed/backend/internal
Tiago Yamamoto beffeb8268 feat(security): add rate limiting and security headers middleware
Rate Limiting (ratelimit.go):
- Token bucket algorithm per IP
- Default: 100 requests/minute
- X-Forwarded-For support
- Cleanup for stale buckets
- 7 tests (ratelimit_test.go)

Security Headers (security.go):
- X-Content-Type-Options: nosniff
- X-Frame-Options: DENY
- X-XSS-Protection: 1; mode=block
- Content-Security-Policy: default-src 'none'
- Referrer-Policy: strict-origin-when-cross-origin
- Cache-Control: no-store, max-age=0

Middleware coverage: 97.3% -> 95.8% (new code added)
2025-12-20 08:41:36 -03:00
..
config feat(backend): add comprehensive test suite for 80% coverage 2025-12-20 07:43:56 -03:00
domain feat(pagination): add pagination to all list endpoints 2025-12-20 08:37:59 -03:00
http feat(security): add rate limiting and security headers middleware 2025-12-20 08:41:36 -03:00
payments feat(backend): add comprehensive test suite for 80% coverage 2025-12-20 07:43:56 -03:00
repository/postgres feat(pagination): add pagination to all list endpoints 2025-12-20 08:37:59 -03:00
server fix: resolve swagger duplicates and add backend tests 2025-12-19 20:28:39 -03:00
usecase feat(pagination): add pagination to all list endpoints 2025-12-20 08:37:59 -03:00