浅念
368b1d5b47
Task 12 + Task 7 quality-review carryovers: Part A - password hashing & controlled initial admin: - src/auth/password.ts: hashPassword/verifyPassword over @node-rs/argon2 (napi prebuilt, argon2id default); empty plain rejected at the door - src/scripts/seed-admin.ts: idempotent admin seed (ADMIN_ACCOUNT/ ADMIN_PASSWORD env, walk-up root .env load); existing account -> skip, never overwrites the password; no audit_logs (system op, no actor) - pnpm seed script (build + node dist/scripts/seed-admin.js); .env.example dev defaults admin/admin-secret-change-me - tests: test/password.spec.ts (5), test/seed.spec.ts real-DB idempotency (4) Part B - Task 7 carryovers (all 8): - ApiException(apiCode, message, httpStatus, details?) recognized first by the filter; unmapped-status rule: >=500 -> INTERNAL_ERROR + generic message, <500 -> VALIDATION_FAILED keeping original status (warn-logged) - 5xx/INTERNAL_ERROR responses forced to generic message (leak fix) - pino redact adds req.headers.cookie / res.headers.set-cookie - x-request-id echo capped at 128 chars (fresh UUID beyond, no log) - LOG_LEVEL validated against pino levels at module wiring -> fail fast - shared/ constants (API_PREFIX), request-with-id, log-level (+spec) - jest ts-jest reuses tsconfig.json; unit testMatch includes test/*.spec.ts - build:watch script (no concurrently dep; dev = build:watch + node --watch) api: 35 unit + 10 e2e tests green; root lint/typecheck/test green. Co-Authored-By: Claude Code <noreply@anthropic.com>
42 lines
1.2 KiB
JSON
42 lines
1.2 KiB
JSON
{
|
|
"name": "@photo/api-cn",
|
|
"version": "0.1.0",
|
|
"private": true,
|
|
"description": "CN NestJS API service (P1a skeleton: bootstrap, /v1/health, request-id, error envelope)",
|
|
"scripts": {
|
|
"build": "tsc -p tsconfig.build.json",
|
|
"build:watch": "tsc -p tsconfig.build.json --watch",
|
|
"start": "tsc -p tsconfig.build.json && node dist/main-cn.js",
|
|
"seed": "tsc -p tsconfig.build.json && node dist/scripts/seed-admin.js",
|
|
"typecheck": "tsc --noEmit",
|
|
"lint": "eslint .",
|
|
"test": "jest",
|
|
"test:e2e": "jest --config jest.e2e.config.ts"
|
|
},
|
|
"dependencies": {
|
|
"@nestjs/common": "^10.4.6",
|
|
"@nestjs/core": "^10.4.6",
|
|
"@nestjs/platform-express": "^10.4.6",
|
|
"@node-rs/argon2": "^2.2.1",
|
|
"@photo/contracts": "workspace:*",
|
|
"@photo/db-cn": "workspace:*",
|
|
"nestjs-pino": "^4.6.1",
|
|
"pino": "^10.0.0",
|
|
"pino-http": "^11.0.0",
|
|
"reflect-metadata": "^0.2.2",
|
|
"rxjs": "^7.8.1"
|
|
},
|
|
"devDependencies": {
|
|
"@nestjs/testing": "^10.4.6",
|
|
"@types/jest": "^29.5.13",
|
|
"@types/node": "^22.10.0",
|
|
"@types/supertest": "^6.0.2",
|
|
"dotenv": "^16.4.5",
|
|
"jest": "^29.7.0",
|
|
"supertest": "^7.0.0",
|
|
"ts-jest": "^29.2.5",
|
|
"ts-node": "^10.9.2",
|
|
"typescript": "^5.6.0"
|
|
}
|
|
}
|