dinggadingga-backend

quentin_duwa/dinggadingga-backend

Fork 0

Commit Graph

Author	SHA1	Message	Date
quentin_duwa	cc3dcd3f0a	feat(sync): harden the Hiboutik sync, share rate limits across instances, update dependencies (#4 ) Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-11-08 13:45:08 +00:00
quentin_duwa	8c8a2ccf15	feat(security): harden the API, trust Hiboutik for deletions, lock syncs (#3 ) - Sync deletions: a 2xx Hiboutik answer is the truth, even an empty list; a failed call (HTTP error or non-list body) deletes nothing (HiboutikClient.getList). - Validate the environment at startup (HIBOUTIK_BASE_URL must be HTTPS), global ValidationPipe, Helmet, CORS opt-in, HTTP timeouts, rate limiting (60 req/min/IP, 5 on POST /sync), AllExceptionsFilter. - Postgres advisory lock so only one synchronization runs at a time across instances; syncAll is private, syncs start through startSync. - Fix the Jest moduleNameMapper; document the validation and security rules in CLAUDE.md. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>	2026-11-08 09:36:50 +00:00
MastersGame	2424a086e0	feat(hiboutik): add Hiboutik API client, repositories and DTOs HiboutikClient handles Basic auth and walks paginated endpoints. One read-only repository per entity (brands, categories, suppliers, products, stocks, customers).	2026-11-05 23:00:47 +01:00

Author

SHA1

Message

Date

quentin_duwa

cc3dcd3f0a

feat(sync): harden the Hiboutik sync, share rate limits across instances, update dependencies (#4 )

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-11-08 13:45:08 +00:00

quentin_duwa

8c8a2ccf15

feat(security): harden the API, trust Hiboutik for deletions, lock syncs (#3 )

- Sync deletions: a 2xx Hiboutik answer is the truth, even an empty list; a failed call (HTTP error or non-list body) deletes nothing (HiboutikClient.getList).
- Validate the environment at startup (HIBOUTIK_BASE_URL must be HTTPS), global ValidationPipe, Helmet, CORS opt-in, HTTP timeouts, rate limiting (60 req/min/IP, 5 on POST /sync), AllExceptionsFilter.
- Postgres advisory lock so only one synchronization runs at a time across instances; syncAll is private, syncs start through startSync.
- Fix the Jest moduleNameMapper; document the validation and security rules in CLAUDE.md.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

2026-11-08 09:36:50 +00:00

MastersGame

2424a086e0

feat(hiboutik): add Hiboutik API client, repositories and DTOs

HiboutikClient handles Basic auth and walks paginated endpoints. One read-only repository per entity (brands, categories, suppliers, products, stocks, customers).

2026-11-05 23:00:47 +01:00

3 Commits