nxtgauge-backend-rust

History

Ashwin Kumar Sivakumar fdd5c7a418 All checks were successful build-and-release / build (developers) (push) Successful in 5m31s Details build-and-release / build (catering-services) (push) Successful in 5m56s Details build-and-release / build (employees) (push) Successful in 6m23s Details build-and-release / build (companies) (push) Successful in 6m31s Details build-and-release / build (cron) (push) Successful in 6m38s Details build-and-release / build (customers) (push) Successful in 7m19s Details build-and-release / build (gateway) (push) Successful in 1m28s Details build-and-release / build (fitness-trainers) (push) Successful in 2m2s Details build-and-release / build (jobs) (push) Successful in 1m12s Details build-and-release / build (graphic-designers) (push) Successful in 2m20s Details build-and-release / build (job-seekers) (push) Successful in 2m24s Details build-and-release / build (photographers) (push) Successful in 2m20s Details build-and-release / build (makeup-artists) (push) Successful in 2m55s Details build-and-release / build (tutors) (push) Successful in 2m15s Details build-and-release / build (payments) (push) Successful in 3m48s Details build-and-release / build (ugc-content-creators) (push) Successful in 2m35s Details build-and-release / build (social-media-managers) (push) Successful in 4m46s Details build-and-release / build (video-editors) (push) Successful in 2m41s Details build-and-release / build (users) (push) Successful in 8m7s Details Fix security audit findings: admin authz, captcha, secret leak, CORS - Require admin role on role/module/permission management endpoints that previously accepted any authenticated user (privilege escalation) - Add server-side captcha generation/verification (Redis-backed, single-use, 5 min TTL) enforced on register/login for users and employees services - Untrack .env.test111 (contained a live SMTP key) and harden .gitignore against future .env commits - Stop logging OTP codes in plaintext - Restrict jobs service CORS to an explicit origin allowlist - Mask PayU merchant secret/salt in payment-gateway-config responses, preserving the stored value on save when the field is left unchanged - Bump vulnerable transitive dependencies (quinn-proto, rustls-webpki, anyhow) via cargo update; switch aws-sdk-s3 off the legacy rustls feature Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>		2026-07-23 17:31:48 +05:30
..
auth	fix payments runtime and jwt backend	2026-06-09 22:52:30 +02:00
cache	Fix security audit findings: admin authz, captcha, secret leak, CORS	2026-07-23 17:31:48 +05:30
contracts	fix: end-to-end workflow fixes for company/job-seeker and profession flows	2026-07-18 11:40:01 +02:00
db	fix: seed verification_status into JOB_SEEKER dashboard widgets	2026-07-23 04:26:05 +05:30
db-migrate	feat(db): update service handlers and models for new schema	2026-04-13 00:29:44 +02:00
email	Update backend services: catering_services, companies, developers, gateway, job_seekers, photographers, social_media_managers, tutors, ugc_content_creators, users; update cache (otp, token), contracts (profession_shared, profession_state), db (job_seeker, verification), email; add revision-requested email template; update init-db.sql and start-services.sh	2026-05-08 15:34:29 +02:00
invoice	feat: generate a GST invoice automatically after a successful Tracecoin/PayU purchase	2026-07-21 03:02:47 +05:30
storage	Fix security audit findings: admin authz, captcha, secret leak, CORS	2026-07-23 17:31:48 +05:30
wallet	feat: profile photo upload, PDF resume generation, AI auto-apply, schema fixes	2026-07-02 13:31:06 +02:00