-
Notifications
You must be signed in to change notification settings - Fork 3
Listing Browse & Search #4
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Changes from all commits
9020917
a6227ae
0d80e8d
72f1469
81d6c0c
f871fed
a4e4f3f
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,21 @@ | ||
| # Backend Port | ||
| PORT=3000 | ||
|
|
||
| # MongoDB Configuration | ||
| MONGO_URI=mongodb://mongodb:27017/campus-marketplace | ||
|
|
||
| ACCESS_TOKEN_SECRET=your-secure-access-token-secret-here | ||
| REFRESH_TOKEN_SECRET=your-secure-refresh-token-secret-here | ||
|
|
||
| # CORS Configuration | ||
| CORS_ORIGIN=http://localhost:5173 | ||
|
|
||
| CLOUDINARY_CLOUD_NAME=your-cloudinary-cloud-name | ||
| CLOUDINARY_API_KEY=your-cloudinary-api-key | ||
| CLOUDINARY_API_SECRET=your-cloudinary-api-secret | ||
|
|
||
| # Frontend Port | ||
| VITE_PORT=5173 | ||
|
|
||
| # API Base URL for Frontend | ||
| VITE_API_BASE_URL=http://localhost:3000/api | ||
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,14 @@ | ||
| node_modules | ||
| npm-debug.log | ||
| .env | ||
| .git | ||
| .gitignore | ||
| README.md | ||
| .vscode | ||
| .idea | ||
| *.log | ||
| dist | ||
| coverage | ||
| .DS_Store | ||
| Dockerfile | ||
| docker-compose.yml |
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,21 @@ | ||
| FROM node:20-alpine | ||
|
|
||
| # Install curl for healthcheck | ||
| RUN apk add --no-cache curl | ||
|
|
||
| WORKDIR /app | ||
|
|
||
| # Copy package files | ||
| COPY package*.json ./ | ||
|
|
||
| # Install dependencies | ||
| RUN npm install | ||
|
|
||
| # Copy source code | ||
| COPY . . | ||
|
|
||
| # Expose port | ||
| EXPOSE 3000 | ||
|
|
||
| # Start the application | ||
| CMD ["npm", "run", "dev"] |
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,6 @@ | ||
| # Netscape HTTP Cookie File | ||
| # https://curl.se/docs/http-cookies.html | ||
| # This file was generated by libcurl! Edit at your own risk. | ||
|
|
||
| #HttpOnly_localhost FALSE / TRUE 0 refreshToken eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJfaWQiOiI2OTBiYTU1YmQ0NTg0ZGQyMjE1ZWViNGYiLCJpYXQiOjE3NjIzNzEwMzIsImV4cCI6MTc2Mjk3NTgzMn0.hwJcY8W_9jIbmIzU3P6XRdRKa_iui1zuKuJ8jcpK3B0 | ||
| #HttpOnly_localhost FALSE / TRUE 0 accessToken eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJfaWQiOiI2OTBiYTU1YmQ0NTg0ZGQyMjE1ZWViNGYiLCJlbWFpbCI6InRlc3RAaWl0YmhpbGFpLmFjLmluIiwidXNlcm5hbWUiOiJ0ZXN0c3R1ZGVudCIsInJvbGVzIjpbInN0dWRlbnQiXSwiaWF0IjoxNzYyMzcxMDMyLCJleHAiOjE3NjIzNzE5MzJ9.uwxgRd6-h4rI3WMOks3e3AxP64sbng3GjHtf1l5rFsA | ||
|
Comment on lines
+1
to
+6
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. CRITICAL: Remove real JWT tokens from version control immediately. This file contains actual JWT tokens that grant authentication access. Committing secrets to version control is a critical security vulnerability that can lead to unauthorized access. Impact:
Required actions:
Apply this to +# Cookie files with credentials
+backend/cookies.txt
+**/cookies.txt
🧰 Tools🪛 Gitleaks (8.28.0)[high] 5-5: Uncovered a JSON Web Token, which may lead to unauthorized access to web applications and sensitive user data. (jwt) [high] 6-6: Uncovered a JSON Web Token, which may lead to unauthorized access to web applications and sensitive user data. (jwt) 🤖 Prompt for AI Agents |
||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Add missing CLOUDINARY_URL variable.
The docker-compose.yml file (line 39) references
CLOUDINARY_URL, but this variable is not included in the .env.example template. Add it to ensure completeness.Apply this diff:
CLOUDINARY_CLOUD_NAME=your-cloudinary-cloud-name CLOUDINARY_API_KEY=your-cloudinary-api-key CLOUDINARY_API_SECRET=your-cloudinary-api-secret +CLOUDINARY_URL=cloudinary://your-api-key:your-api-secret@your-cloud-name📝 Committable suggestion
🧰 Tools
🪛 dotenv-linter (4.0.0)
[warning] 14-14: [UnorderedKey] The CLOUDINARY_API_KEY key should go before the CLOUDINARY_CLOUD_NAME key
(UnorderedKey)
[warning] 15-15: [UnorderedKey] The CLOUDINARY_API_SECRET key should go before the CLOUDINARY_CLOUD_NAME key
(UnorderedKey)
🤖 Prompt for AI Agents