nobswebdev
f2987da2fe
update upload validation to use shared AES-GCM size constants on the backend.
2026-10-19 02:59:52 +02:00
nobswebdev
8b42dbb962
Use Node 22 in dev Docker images for file-type v22.
2026-10-12 21:45:44 +02:00
nobswebdev
d4529376c6
Add single-image zk and hotlink upload API with service tests.
...
Replace batch DTOs with per-mode endpoints, persist ciphertext with file-type
checks, and return a hashed delete token for future revocation.
2026-10-12 20:18:40 +02:00
nobswebdev
7f99256863
Verify ALTCHA before upload body parse with single-use replay store.
...
Run challenge TTL and replay tracking in middleware, remove the guard, and
wire ScheduleModule for pruning used solutions.
2026-10-12 20:18:36 +02:00
nobswebdev
96383a7426
Restructure upload validation env and colocate config types.
...
Move app config shapes under types/config, replace batch upload env vars with
per-image bytes and JSON body padding, and extend IsBase64 for decoded limits.
2026-10-12 20:18:22 +02:00
nobswebdev
c762223200
Add zk and hotlink upload create DTOs with batch options.
...
Split item shapes, array caps from config, and password-protected zk item transform.
2026-10-07 00:36:16 +02:00
nobswebdev
fa36b27d1b
Add isBase64 and NullOr validators for upload DTOs.
...
Include toBase64 helper and focused specs for base64 and null-or field rules.
2026-10-07 00:36:13 +02:00
nobswebdev
493843cc42
Move upload caps into validation config env vars.
...
Replace MAX_IMAGES_PER_UPLOAD with VALIDATION_UPLOAD_* limits mirrored on the frontend VITE_* names.
2026-10-07 00:36:10 +02:00
nobswebdev
64180d21e7
validate env booleans as true/false strings only.
...
Avoid @IsBoolean with implicit conversion mismatching isEnabled(); add tests and shared BOOLEAN_STRING_VALUES.
2026-10-06 19:44:31 +02:00
nobswebdev
b16678bf74
add dockerignore for backend and frontend dev images.
...
Prevent copying host node_modules, dist, and build artifacts into Docker build context.
2026-10-06 19:44:13 +02:00
nobswebdev
7e4a889b50
add upload rate limiter per IP to backend.
...
Nest throttler with nullcart-style default profile and upload override via throttleProfiles.
2026-10-06 18:59:44 +02:00
nobswebdev
84f8a85214
add ALTCHA verification guard for uploads.
...
Verify body.altcha when ALTCHA_ENABLED; export AltchaGuard only. Drop unused StorageModule export.
2026-10-06 15:04:31 +02:00
nobswebdev
87376ea37f
add ALTCHA challenge endpoint and env config.
...
GET /api/altcha/challenge, nullcart-style env validation, and ALTCHA_ENABLED wiring.
2026-10-05 23:53:28 +02:00
nobswebdev
a8070da39d
add local ciphertext storage module to backend.
...
Bind-mount backend/uploads in dev; path helpers with traversal guards and Jest coverage for StorageService.
2026-10-05 23:01:31 +02:00
nobswebdev
fb1cb1d6b0
add migration and entities for uploads upload_zk upload_hotlink.
2026-10-05 22:14:26 +02:00
nobswebdev
64041aa9a8
add TypeORM postgres config and migration runner.
2026-10-05 20:54:50 +02:00
nobswebdev
572844bc73
add backend Docker dev service with hot reload.
...
Wire Nest into dev compose with src bind mount and health-check probe.
2026-09-27 23:06:19 +02:00
nobswebdev
a785ce775f
add NestJS skeleton and GET /api/health-check.
...
Thin API bootstrap with config module and nullcart-style health route for Docker checks.
2026-09-27 23:05:28 +02:00
nobswebdev
90c2bbdbdd
add monorepo layout and root README
2026-09-27 22:29:19 +02:00
nobswebdev