feat(api): add helmet, csrf protection and rate limiter #132
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
…script desc in root readme
Mefjus
approved these changes
Mar 18, 2021
github-actions bot
pushed a commit
that referenced
this pull request
Mar 28, 2021
# 1.0.0 (2021-03-28) ### Bug Fixes * remove control/test steps from release workflow ([36f6d53](36f6d53)) * sort root package.json ([9c64395](9c64395)) * **admin:** remove password logging ([f809800](f809800)) * **api:** add ssl option to ormconfig.js ([#83](#83)) ([1417ff2](1417ff2)) * **api:** generate new migration ([#84](#84)) ([6c653e2](6c653e2)) * **api:** invitation unit test ([e5e64b9](e5e64b9)) * **api:** move onInit to separate file ([197b98f](197b98f)) * **api:** remove unnecessary 'await' ([d52c5a8](d52c5a8)) * **client:** add borderRadius from theme ([cf1d01e](cf1d01e)) * **client:** add test changes ([fac8d29](fac8d29)) * **client:** adjustments and add base TabLayout orientation ([9f5cf38](9f5cf38)) * **client:** based on review ([a5ad1d0](a5ad1d0)) * **client:** change default props in TabbedLayout story ([3f3791b](3f3791b)) * **client:** change enum to types in localStorageKeys ([163a13d](163a13d)) * **client:** fix TabbedLayout storybook title ([fcae2b7](fcae2b7)) * **client:** remove appBar test ([3aee8d6](3aee8d6)) * **client:** tabbed layout story ([3d64d5c](3d64d5c)) * add browsers list for client and lint main readme ([02090b2](02090b2)) * change RouteGuard.types file name ([27af123](27af123)) * ci build step ([7000294](7000294)) * not loaded styles ([9f6a9ee](9f6a9ee)) * root package version ([3347166](3347166)) * **client:** fix issue with not submitting form on enter press ([ba6aae9](ba6aae9)) * **client:** fix useAnimated types ([0acebf8](0acebf8)) * **client:** fix useForm config, move shake anim on error, add validation for login ([14071e2](14071e2)) * **client:** remove blank space ([80720db](80720db)) * **client:** remove netlify ignore script ([1e9a900](1e9a900)) * **client:** theme boxShadow ([e7c6ce6](e7c6ce6)) * add build directory to gitignore ([4151fc2](4151fc2)) * add cookie sign option and change sameSite ([#60](#60)) ([14c1ced](14c1ced)) * bump and fix eslint ([a8c8664](a8c8664)) * cookie sameSite set to 'lax' ([#57](#57)) ([18dfb48](18dfb48)) * eslint ([bdd52de](bdd52de)) * extract noEmit ts option ([0a709e1](0a709e1)) * replace api port for .env.example files ([15d36dc](15d36dc)) * restore react-app-env.d.ts and change typeorm ssl config ([4849224](4849224)) * root readme logo displaying ([1b49535](1b49535)) * yarn.lock ([bbd6c75](bbd6c75)) * **api:** app.e2e test ([59153bc](59153bc)) ### Features * add admin page navigation ([db49302](db49302)) * add react-query ([#170](#170)) ([124a3d6](124a3d6)) * add semantic release ([48c6267](48c6267)) * **api:** add find method in invitation ([be64e64](be64e64)) * **api:** add global config module ([#138](#138)) ([5afdf16](5afdf16)) * **api:** add helmet, csrf protection and rate limiter ([#132](#132)) ([720d745](720d745)) * **api:** add invitation config and docker limits ([fbeedad](fbeedad)) * **api:** add invitation service ([3eb296d](3eb296d)) * **api:** add invitation.entity.ts ([3e5d723](3e5d723)) * **api:** add postgres-multi-db script ([#31](#31)) ([8d42f60](8d42f60)) * **api:** add repository module ([0e56240](0e56240)) * **api:** add send invitation.service.ts method ([da0022a](da0022a)) * **api:** add super admin on init ([cd45cfb](cd45cfb)) * **api:** add superAdmin add unique index ([30b3255](30b3255)) * **api:** setup db for tests ([#33](#33)) ([8b1a9e7](8b1a9e7)) * **api:** setup sentry ([#140](#140)) ([d60fc2e](d60fc2e)) * **client:** add Animated component ([f1a8b44](f1a8b44)) * **client:** add animatedLogo ([bec807f](bec807f)) * **client:** add base AppBar styling, handle TabbedLayout variant, i18n, fix sentry init ([97dfbe9](97dfbe9)) * **client:** add base tabbed view ([48ef366](48ef366)) * **client:** add chromatic script ([c729937](c729937)) * **client:** add ConditionRoute ([e6a29e5](e6a29e5)) * **client:** add display name for element template generator ([4169956](4169956)) * **client:** add generic ripple effect ([b857102](b857102)) * **client:** add icons, add base AppBar, add hygen element .run ([f17bf3d](f17bf3d)) * **client:** add LayoutContainer, rename BackgroundLogo, simplify login container ([c72980a](c72980a)) * **client:** add login view styles ([a8bb9df](a8bb9df)) * **client:** add password updated info screen ([#119](#119)) ([8367596](8367596)) * **client:** add sentry ([#144](#144)) ([69a0c3c](69a0c3c)) * **client:** add storybook custom decorators for theme and i18n ([60c5ccd](60c5ccd)) * **client:** add storybook jest-tests and sg theming ([f6ced19](f6ced19)) * **client:** add storybook layout decorator, add appbar placement for mobile ([7d36870](7d36870)) * **client:** add storybook source and a11y addons ([2797a3e](2797a3e)) * **client:** add storybook theme switch and i18n provider ([731d4d0](731d4d0)) * **client:** add useAnimated hook, fix useOnScreen ([d7d338d](d7d338d)) * **client:** adjust appBar styling ([8c10178](8c10178)) * **client:** cleanup ([2fd0f25](2fd0f25)) * **client:** handle accessibility, handle animation logo on click ([#109](#109)) ([72f77de](72f77de)) * **client:** handle pwa icons and colors ([#102](#102)) ([12c2372](12c2372)) * **client:** handle TabbedLayout fullWidth, elements focus-visible ([ca01987](ca01987)) * **client:** handle vertical tabs ([1196461](1196461)) * **client:** move DefaultLayout under Router definition ([bf307b8](bf307b8)) * **client:** replace elements jsx with just styled-components ([709c7fd](709c7fd)) * **client:** sort hooks in login container ([0ef3422](0ef3422)) * add import and react-hooks eslint plugins ([#24](#24)) ([e2d711a](e2d711a)) * add package core and remove 'remember me' checkbox from login view ([#4](#4)) ([0bde240](0bde240)) * move all models to models folder ([#62](#62)) ([2358f2f](2358f2f)) * **ssdsd:** add package scope commitlint ([0ae2000](0ae2000)) * setup base repository ([d9992a1](d9992a1))
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
…script desc in root readme
Overview of PR
Technical & Architecture Changes
TODO