nxtgauge-backend-rust

History

Ashwin Kumar Sivakumar fdd5c7a418 All checks were successful build-and-release / build (developers) (push) Successful in 5m31s Details build-and-release / build (catering-services) (push) Successful in 5m56s Details build-and-release / build (employees) (push) Successful in 6m23s Details build-and-release / build (companies) (push) Successful in 6m31s Details build-and-release / build (cron) (push) Successful in 6m38s Details build-and-release / build (customers) (push) Successful in 7m19s Details build-and-release / build (gateway) (push) Successful in 1m28s Details build-and-release / build (fitness-trainers) (push) Successful in 2m2s Details build-and-release / build (jobs) (push) Successful in 1m12s Details build-and-release / build (graphic-designers) (push) Successful in 2m20s Details build-and-release / build (job-seekers) (push) Successful in 2m24s Details build-and-release / build (photographers) (push) Successful in 2m20s Details build-and-release / build (makeup-artists) (push) Successful in 2m55s Details build-and-release / build (tutors) (push) Successful in 2m15s Details build-and-release / build (payments) (push) Successful in 3m48s Details build-and-release / build (ugc-content-creators) (push) Successful in 2m35s Details build-and-release / build (social-media-managers) (push) Successful in 4m46s Details build-and-release / build (video-editors) (push) Successful in 2m41s Details build-and-release / build (users) (push) Successful in 8m7s Details Fix security audit findings: admin authz, captcha, secret leak, CORS - Require admin role on role/module/permission management endpoints that previously accepted any authenticated user (privilege escalation) - Add server-side captcha generation/verification (Redis-backed, single-use, 5 min TTL) enforced on register/login for users and employees services - Untrack .env.test111 (contained a live SMTP key) and harden .gitignore against future .env commits - Stop logging OTP codes in plaintext - Restrict jobs service CORS to an explicit origin allowlist - Mask PayU merchant secret/salt in payment-gateway-config responses, preserving the stored value on save when the field is left unchanged - Bump vulnerable transitive dependencies (quinn-proto, rustls-webpki, anyhow) via cargo update; switch aws-sdk-s3 off the legacy rustls feature Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>		2026-07-23 17:31:48 +05:30
..
ai.rs	Add Redis caching for AI generation rate limiting	2026-05-01 03:02:46 +02:00
captcha.rs	Fix security audit findings: admin authz, captcha, secret leak, CORS	2026-07-23 17:31:48 +05:30
client.rs	feat: add Redis for OTP, auth tokens, rate limiting, lead dedup and marketplace cache	2026-03-18 22:58:42 +01:00
jobs.rs	chore: checkpoint current workspace changes	2026-03-22 15:55:29 +01:00
lead.rs	feat: add Redis for OTP, auth tokens, rate limiting, lead dedup and marketplace cache	2026-03-18 22:58:42 +01:00
lib.rs	Fix security audit findings: admin authz, captcha, secret leak, CORS	2026-07-23 17:31:48 +05:30
ollama.rs	fix: resolve warnings (partial)	2026-07-06 02:55:42 +05:30
otp.rs	Update backend services: catering_services, companies, developers, gateway, job_seekers, photographers, social_media_managers, tutors, ugc_content_creators, users; update cache (otp, token), contracts (profession_shared, profession_state), db (job_seeker, verification), email; add revision-requested email template; update init-db.sql and start-services.sh	2026-05-08 15:34:29 +02:00
rate_limit.rs	fix(admin-auth): add rate limiting to admin login endpoint	2026-07-14 16:12:52 +05:30
token.rs	feat(employees): add forgot-password/reset-password for admin accounts	2026-07-14 23:28:39 +05:30