Stephen Minakian af52c33617 Add security fixes and deployment configuration ...

Security fixes:
- Remove hardcoded MongoDB credentials from server.js (fail fast in production)
- Add OAuth state parameter validation for CSRF protection
- Add input validation for unitCode parameter to prevent NoSQL injection
- Add isValidUnitCode helper function

Deployment:
- Update docker-compose.yml to use env_file and environment variables
- Create .env.example with all required configuration variables

2026-01-21 18:04:37 -07:00

.github/workflows

Initial commit

2025-07-15 17:51:26 -06:00

config

Add Google OAuth authentication infrastructure

2026-01-21 16:45:34 -07:00

middleware

Add Google OAuth authentication infrastructure

2026-01-21 16:45:34 -07:00

models

Add Google OAuth authentication infrastructure

2026-01-21 16:45:34 -07:00

routes

Add security fixes and deployment configuration

2026-01-21 18:04:37 -07:00

services

Add user activity logging system

2026-01-21 17:53:56 -07:00

.env.example

Add security fixes and deployment configuration

2026-01-21 18:04:37 -07:00

.gitignore

Initial commit

2025-07-15 17:51:26 -06:00

docker-compose.yml

Add security fixes and deployment configuration

2026-01-21 18:04:37 -07:00

Dockerfile

expanded-api (#2)

2026-01-21 10:18:46 -07:00

package-lock.json

Add Google OAuth authentication infrastructure

2026-01-21 16:45:34 -07:00

package.json

Add Google OAuth authentication infrastructure

2026-01-21 16:45:34 -07:00

server.js

Add security fixes and deployment configuration

2026-01-21 18:04:37 -07:00

Description

No description provided

1.4 MiB

Languages

JavaScript 97.8%

HTML 2.1%