Ryan Moon e44d461de1 Fix MEDIUM security issues, add logging and request timeout ...

- Password minimum increased from 8 to 12 characters
- CORS configurable via CORS_ORIGINS env var (comma-separated whitelist)
- Pagination empty string q param handled via preprocess
- Request timeout set to 30 seconds
- Log file output via LOG_FILE env var (stdout + file in production)
- Pino-pretty in development, JSON to stdout + file in production

2026-03-28 16:14:05 -05:00

..

db

Implement file storage layer with local provider, upload/download API, tests

2026-03-28 15:29:06 -05:00

lib

Fix security issues: path traversal, typed errors, file validation

2026-03-28 16:03:45 -05:00

plugins

Fix MEDIUM security issues, add logging and request timeout

2026-03-28 16:14:05 -05:00

routes/v1

Fix security issues: path traversal, typed errors, file validation

2026-03-28 16:03:45 -05:00

services

Fix security issues: path traversal, typed errors, file validation

2026-03-28 16:03:45 -05:00

storage

Implement file storage layer with local provider, upload/download API, tests

2026-03-28 15:29:06 -05:00

test

Add lookup tables, payment methods, tax exemptions, and processor link APIs

2026-03-27 20:53:30 -05:00

utils

Refactor all list APIs for server-side pagination, search, and sort

2026-03-27 19:53:59 -05:00

main.ts

Fix MEDIUM security issues, add logging and request timeout

2026-03-28 16:14:05 -05:00