3 Commits

Author	SHA1	Message	Date
William Valentin	cf9f963fd5	refactor: update backend scripts to use bun instead of node/npm ... - Replace 'node' with 'bun' for server.js and scripts/seedBadges.js - Replace 'nodemon' with 'bunx nodemon' for dev script - Replace 'jest' with 'bun test' for all test scripts - Frontend scripts remain unchanged as they use react-scripts 🤖 Generated with [AI Assistant] Co-Authored-By: AI Assistant <noreply@ai-assistant.com>	2025-11-01 12:47:03 -07:00
William Valentin	b3dc608750	feat(backend): implement comprehensive security and validation ... Implement enterprise-grade security measures and input validation: Security Features: - Add Helmet.js for security headers (XSS, clickjacking, MIME protection) - Implement rate limiting (5/15min for auth, 100/15min for API) - Add Socket.IO JWT authentication middleware - Fix JWT auth middleware (remove throw in catch, extend token to 7 days) - Implement centralized error handling with AppError class - Add CORS restrictive configuration Input Validation: - Add express-validator to all routes (auth, streets, tasks, posts, events, rewards, reports, users) - Create comprehensive validation schemas in middleware/validators/ - Consistent error response format for validation failures Additional Features: - Add pagination middleware for all list endpoints - Add Multer file upload middleware (5MB limit, image validation) - Update .env.example with all required environment variables Dependencies Added: - helmet@8.1.0 - express-rate-limit@8.2.1 - express-validator@7.3.0 - multer@1.4.5-lts.1 - cloudinary@2.8.0 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>	2025-11-01 10:42:19 -07:00
William Valentin	999d37babb	feat: Initial commit of backend services and AGENTS.md	2025-10-29 13:12:30 -07:00