Skip to content

feat(security): harden NestJS API for production deployment#67

Open
ijaznaeem wants to merge 1 commit into
rmyndharis:mainfrom
ijaznaeem:feat/production-security-app
Open

feat(security): harden NestJS API for production deployment#67
ijaznaeem wants to merge 1 commit into
rmyndharis:mainfrom
ijaznaeem:feat/production-security-app

Conversation

@ijaznaeem
Copy link
Copy Markdown

Add body size limits, production CORS policy, trust proxy, and Swagger gating. Wire API_MASTER_KEY for bootstrap auth, enforce webhook HMAC secrets on create/dispatch, and register SecurityMiddleware globally. Update .env.example with new security variables.

Description

Brief description of changes

Type of Change

  • Bug fix
  • New feature
  • Breaking change
  • Documentation update

Checklist

  • Tests added/updated
  • Documentation updated
  • Lint passes
  • Self-reviewed

Screenshots (if applicable)

Related Issues

Closes #

Add body size limits, production CORS policy, trust proxy, and Swagger gating. Wire API_MASTER_KEY for bootstrap auth, enforce webhook HMAC secrets on create/dispatch, and register SecurityMiddleware globally. Update .env.example with new security variables.

Co-authored-by: Cursor <cursoragent@cursor.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant