mirror of
https://github.com/fromchat-messenger/web.git
synced 2026-09-22 11:05:05 +03:00
Add multi-service Docker setup, Postgres migrations, and messaging API cleanup
This commit is contained in:
@@ -8,7 +8,6 @@ Perform a comprehensive security audit of the FromChat application codebase.
|
||||
|
||||
- React/TypeScript frontend
|
||||
- Python FastAPI backend
|
||||
- End-to-end encryption for DMs and calls
|
||||
- Caddy reverse proxy with security headers
|
||||
- WebSocket support for real-time features
|
||||
- Electron support for desktop app
|
||||
@@ -122,7 +121,7 @@ Provide a **clean, concise report** with:
|
||||
- CORS configuration in backend/app.py
|
||||
- Password validation in backend/validation.py
|
||||
- JWT token generation and validation
|
||||
- E2E encryption implementation (NaCl, AES-GCM)
|
||||
- Encryption implementation (NaCl, AES-GCM)
|
||||
- File upload sanitization
|
||||
- Authorization checks on sensitive endpoints
|
||||
- Rate limiting configuration
|
||||
|
||||
@@ -21,6 +21,7 @@ When working with this project, follow these rules:
|
||||
## File Operations
|
||||
- If possible, try to update files in a single edit when making multiple changes.
|
||||
- Do NOT "cd" to the project directory.
|
||||
- NEVER edit/delete/regenerate .env files without explicit permission.
|
||||
|
||||
## Testing & Validation
|
||||
- Do NOT "test the implementation" when you are done. The only exception is when you
|
||||
|
||||
Reference in New Issue
Block a user