05911f4230
- Validate the environment at startup (src/config): required variables must be present, HIBOUTIK_BASE_URL must be HTTPS. - Global ValidationPipe (whitelist, forbidNonWhitelisted, transform). - Helmet, CORS disabled unless CORS_ORIGINS is set, TRUST_PROXY support, HTTP header/request timeouts, shutdown hooks. - Rate limiting: 60 req/min/IP globally, 5 req/min on POST /sync. - AllExceptionsFilter: unexpected errors are logged (message + stack, never the raw error object) and answered with a generic 500. - Postgres advisory lock (dedicated connection) so only one synchronization runs at a time across all instances; released by Postgres itself if the process dies. - Fix the Jest moduleNameMapper (unescaped dot also matched .cjs files). - Document the input validation and security rules in CLAUDE.md. - Add class-validator, class-transformer, helmet and @nestjs/throttler; npm audit fix refreshed package-lock.json. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
106 lines
2.8 KiB
JSON
106 lines
2.8 KiB
JSON
{
|
|
"name": "dinggadingga-backend",
|
|
"version": "0.0.1",
|
|
"description": "",
|
|
"author": "",
|
|
"private": true,
|
|
"license": "UNLICENSED",
|
|
"scripts": {
|
|
"postinstall": "prisma generate --config prisma7.config.ts",
|
|
"build": "nest build",
|
|
"format": "prettier --write \"src/**/*.ts\" \"test/**/*.ts\"",
|
|
"start": "nest start",
|
|
"start:dev": "nest start --watch",
|
|
"start:debug": "nest start --debug --watch",
|
|
"start:prod": "node dist/main",
|
|
"lint": "eslint \"{src,apps,libs,test}/**/*.ts\" --fix",
|
|
"test": "jest",
|
|
"test:watch": "jest --watch",
|
|
"test:cov": "jest --coverage",
|
|
"test:debug": "node --inspect-brk -r tsconfig-paths/register -r ts-node/register node_modules/.bin/jest --runInBand",
|
|
"test:e2e": "jest --config ./test/jest-e2e.json"
|
|
},
|
|
"dependencies": {
|
|
"@nestjs/axios": "^4.0.1",
|
|
"@nestjs/common": "^11.0.1",
|
|
"@nestjs/config": "^12.0.0",
|
|
"@nestjs/core": "^11.0.1",
|
|
"@nestjs/platform-express": "^11.0.1",
|
|
"@nestjs/throttler": "^6.7.1",
|
|
"@prisma/adapter-pg": "^7.10.0",
|
|
"@prisma/client": "^7.10.0",
|
|
"axios": "1.20.0",
|
|
"class-transformer": "^0.5.1",
|
|
"class-validator": "^0.15.1",
|
|
"helmet": "^8.3.0",
|
|
"pg": "^8.23.0",
|
|
"reflect-metadata": "^0.2.2",
|
|
"rxjs": "^7.8.1"
|
|
},
|
|
"devDependencies": {
|
|
"@eslint/eslintrc": "^3.2.0",
|
|
"@eslint/js": "^9.18.0",
|
|
"@nestjs/cli": "^12.0.11",
|
|
"@nestjs/schematics": "^11.0.0",
|
|
"@nestjs/testing": "^11.0.1",
|
|
"@types/express": "^5.0.0",
|
|
"@types/jest": "^30.0.0",
|
|
"@types/node": "^24.0.0",
|
|
"@types/pg": "^8.23.1",
|
|
"@types/supertest": "^7.0.0",
|
|
"eslint": "^9.18.0",
|
|
"eslint-config-prettier": "^10.0.1",
|
|
"eslint-plugin-prettier": "^5.2.2",
|
|
"globals": "^17.0.0",
|
|
"jest": "^30.0.0",
|
|
"prettier": "^3.4.2",
|
|
"prisma": "^7.10.0",
|
|
"source-map-support": "^0.5.21",
|
|
"supertest": "^7.0.0",
|
|
"ts-jest": "^29.2.5",
|
|
"ts-loader": "^9.5.2",
|
|
"ts-node": "^10.9.2",
|
|
"tsconfig-paths": "^4.2.0",
|
|
"typescript": "^5.7.3",
|
|
"typescript-eslint": "^8.20.0"
|
|
},
|
|
"jest": {
|
|
"moduleFileExtensions": [
|
|
"js",
|
|
"json",
|
|
"ts"
|
|
],
|
|
"rootDir": "src",
|
|
"testRegex": ".*\\.spec\\.ts$",
|
|
"transform": {
|
|
"^.+.ts$": "ts-jest",
|
|
"^.+.js$": [
|
|
"ts-jest",
|
|
{
|
|
"tsconfig": {
|
|
"allowJs": true,
|
|
"module": "commonjs",
|
|
"moduleResolution": "node"
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"collectCoverageFrom": [
|
|
"**/*.(t|j)s"
|
|
],
|
|
"coverageDirectory": "../coverage",
|
|
"testEnvironment": "node",
|
|
"transformIgnorePatterns": [
|
|
"/node_modules/(?!@nestjs/config/)"
|
|
],
|
|
"moduleNameMapper": {
|
|
"^(\\.{1,2}/.*)\\.js$": "$1"
|
|
}
|
|
},
|
|
"allowScripts": {
|
|
"@parcel/watcher@2.6.0": true,
|
|
"@prisma/engines@7.10.1": true,
|
|
"prisma@7.10.1": true
|
|
}
|
|
}
|