Skip to content

Commit fff710a

Browse files
committed
release: v1.1.0 - Enhanced security, monitoring, and configuration management
Major Features: - Add comprehensive architecture documentation (ARCHITECTURE.md) - Implement centralized environment variable validation (src/config/env.js) - Add Redis support for distributed rate limiting (src/config/redis.js) - Add metrics collection endpoint and middleware (src/routes/metrics.js, src/middleware/metrics.js) - Implement query security middleware to prevent SQL injection (src/middleware/querySecurity.js) - Add structured error handling system (src/errors/index.js) - Add body parser middleware for request validation (src/middleware/bodyParser.js) Infrastructure & Testing: - Add Jest testing framework with test setup and initial test suites - Add test coverage for error handling and validation middleware - Add authentication route tests - Update Docker Compose configurations for development and production Security & Performance: - Enhance OAuth2 client implementation - Improve rate limiting with Redis fallback support - Strengthen query endpoint security - Update authentication and health check endpoints Documentation & Configuration: - Update README with new features and improved setup instructions - Enhance OpenAPI documentation with new endpoints and schemas - Update .env.example with new configuration options - Improve .gitignore for better security Dependencies: - Add ioredis for Redis connectivity - Add rate-limit-redis for distributed rate limiting - Remove passport dependencies in favor of custom OAuth2 implementation - Update all dependencies to latest compatible versions This release significantly improves the API's security posture, observability, and developer experience while maintaining backward compatibility.
1 parent eb2488d commit fff710a

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

44 files changed

+8757
-1605
lines changed

.env.example

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -172,6 +172,26 @@ ALLOWED_ORIGINS=http://localhost:3000,http://localhost:5678
172172
# Default: info
173173
LOG_LEVEL=info
174174

175+
# =============================================================================
176+
# REDIS CONFIGURATION (Optional)
177+
# =============================================================================
178+
# Redis is used for distributed rate limiting across multiple API instances.
179+
# If not configured, rate limiting will use in-memory store (single instance only).
180+
# =============================================================================
181+
182+
# Redis connection URL (preferred method)
183+
# Format: redis://[password@]host:port[/database]
184+
# Example: redis://localhost:6379
185+
# Example with password: redis://mypassword@localhost:6379
186+
# Optional: Only set if using Redis for rate limiting
187+
# REDIS_URL=redis://localhost:6379
188+
189+
# Redis connection details (alternative to REDIS_URL)
190+
# Optional: Only set if using Redis for rate limiting
191+
# REDIS_HOST=localhost
192+
# REDIS_PORT=6379
193+
# REDIS_PASSWORD=your_redis_password
194+
175195
# =============================================================================
176196
# SECURITY NOTES
177197
# =============================================================================

.gitignore

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -142,7 +142,4 @@ vite.config.ts.timestamp-*
142142
.vite/
143143

144144
# appdata
145-
data/
146-
147-
# Markdown
148-
SECURITY*.md
145+
data/

0 commit comments

Comments
 (0)