c9b38dc6ab
fix(security): resolve audit findings — secrets, env contract, migrations
...
Removes hardcoded fallback secrets and makes a misconfigured deploy fail
loudly instead of silently falling back to development defaults.
- Remove insecure JWT fallback secrets (messages.module, configuration)
- Remove the 'default-secret' fallback for the 2FA TOTP encryption key and
allow a dedicated TWO_FACTOR_ENCRYPTION_KEY so rotating JWT_SECRET no
longer locks out every 2FA user (see docs/2fa-key-rotation.md)
- Require EMAIL_API_URL; drop the hardcoded vendor email endpoint
- Drive WebSocket CORS from CORS_ORIGINS instead of origin:'*'
- Load .env before any Nest module is imported (src/load-env.ts). Decorator
arguments evaluate at import time, so the gateway previously froze its CORS
config to the localhost fallback even when CORS_ORIGINS was set
- Add boot-time env validation: missing required vars, weak JWT_SECRET, and
inverted access/refresh token lifetimes now abort startup
- Enable Redis TLS certificate verification
- Require ADMIN_EMAIL/ADMIN_PASSWORD for the seed; remove the published
default super-admin credentials and stop printing them
- Add the initial Prisma migration and stop gitignoring prisma/migrations
- Make .env.example an accurate configuration contract (admin bootstrap,
REDIS_TLS, S3_ENDPOINT, 2FA key, Firebase path; drop the dead SMTP block)
- Add handover documentation: architecture, ER model, sequence and data-flow
diagrams, 2FA key rotation runbook
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com >
2026-08-04 16:03:08 +05:30
pradeepkumar
fdbc727139
feat: prioritize favorited conversations in query results for both agents and users
2026-04-24 22:04:30 +05:30
pradeepkumar
d84e55cb61
feat: mark related message notifications as read when updating conversation unread count
2026-04-13 22:48:05 +05:30
pradeepkumar
09003bd409
refactor: update deleteConversation to perform soft-delete without notifying other participants
2026-04-10 17:44:38 +05:30
pradeepkumar
78133497b3
feat: implement per-user soft delete for conversations with automatic restoration on new messages
2026-04-10 16:48:12 +05:30
pradeepkumar
eb6a78ead9
feat: notify other participant via gateway when a conversation is deleted
2026-04-09 16:02:24 +05:30
pradeepkumar
1843db79f3
fix: reduce socket ping intervals and remove unreliable auto-delivery status updates in messages gateway
2026-04-08 18:39:19 +05:30
pradeepkumar
e7898536ec
feat: add message_received socket handler to notify senders of delivery status
2026-04-07 19:52:46 +05:30
pradeepkumar
539fdf70e3
feat: implement Redis-backed Socket.io adapter and user presence service for cross-instance communication
2026-04-02 19:30:08 +05:30
pradeepkumar
0a2d46e81b
fix: standardize message timestamps to ISO strings and update delivery status in real-time events
2026-04-02 10:58:23 +05:30
pradeepkumar
475bc9e251
feat: emit real-time messages_read socket event when marking conversation as read
2026-03-31 19:28:48 +05:30
pradeepkumar
bd79e09b7f
fix: wrap admin room join logic in try-catch to prevent connection failures and remove redundant comment
2026-03-31 05:33:43 +05:30
pradeepkumar
e1990a41e0
feat: implement rate limiting for socket events, sanitize error responses, and include agent profile details in user service output
2026-03-29 03:31:44 +05:30
pradeepkumar
b8d133783b
feat: implement per-user chat clearing by filtering messages based on new clearedAt timestamps
2026-03-28 20:25:15 +05:30
pradeepkumar
a71145f6a6
feat: implement privacy-aware profile visibility and activity status filtering using optional authentication guard
2026-03-28 18:46:49 +05:30
pradeepkumar
ba931c350b
ifx
2026-03-28 02:21:32 +05:30
pradeepkumar
1697d638b6
feat: Automatically mark messages as delivered when recipients come online or receive new messages.
2026-03-28 02:02:49 +05:30
pradeepkumar
486b9f9421
feat: display specific truncated content for image and file messages in conversations.
2026-03-27 06:24:02 +05:30
pradeepkumar
0da76838a1
feat: Add connection validation before sending messages and extend support chat admin access to include SUPER_ADMIN role.
2026-03-25 23:57:59 +05:30
pradeepkumar
31439c3b06
feat: Add SUPER_ADMIN role with dedicated admin user management and updated access controls for existing admin features.
2026-03-20 17:05:40 +05:30
pradeepkumar
fcf90e8638
feat: implement conversation mute and favorite functionality with corresponding notification suppression.
2026-03-19 17:04:02 +05:30
pradeepkumar
a68cd4c7d3
feat: Add endpoint and service logic to clear all messages within a conversation.
2026-03-19 09:33:06 +05:30
pradeepkumar
4d5a3fc36d
feat: Add an admin endpoint to retrieve the total count of unread support messages.
2026-03-19 04:19:55 +05:30
pradeepkumar
c3a3df704e
feat: Implement real-time message delivery for conversations via WebSocket integration and update admin seed email.
2026-03-18 16:49:13 +05:30
pradeepkumar
2cb4a649bd
feat: Improve message broadcasting to exclude sender, add error handling for direct delivery, and enhance sendToUser logging.
2026-03-17 18:02:53 +05:30
pradeepkumar
960cdd8d48
feat: Allow both users and agents to initiate conversations and dynamically display the other party based on the caller's role, while also enhancing user profile data in connection requests.
2026-03-15 00:28:14 +05:30
pradeepkumar
c431c751e8
feat: Add endpoint and service logic to delete conversations and their associated messages.
2026-03-10 00:10:38 +05:30
pradeepkumar
399b8aa937
feat: implement support chat functionality with new module, service, controller, DTOs, and schema updates.
2026-03-05 06:37:07 +05:30
pradeepkumar
7b8d6e3db8
feat: Implement in-app notifications with new database model, enhance Firebase initialization to support service account files, and add message read functionalities.
2026-02-25 06:45:27 +05:30
pradeepkumar
7ab5330a88
fix
2026-02-24 22:36:42 +05:30
pradeepkumar
755ddda123
feat: Implement direct notification for new messages and read receipts to conversation participants.
2026-02-11 04:48:15 +05:30
pradeepkumar
3b1a7b999e
feat: Implement real-time messaging module with REST API endpoints and WebSocket gateway.
2026-02-08 22:44:16 +05:30
