c9b38dc6ab
fix(security): resolve audit findings — secrets, env contract, migrations
...
Removes hardcoded fallback secrets and makes a misconfigured deploy fail
loudly instead of silently falling back to development defaults.
- Remove insecure JWT fallback secrets (messages.module, configuration)
- Remove the 'default-secret' fallback for the 2FA TOTP encryption key and
allow a dedicated TWO_FACTOR_ENCRYPTION_KEY so rotating JWT_SECRET no
longer locks out every 2FA user (see docs/2fa-key-rotation.md)
- Require EMAIL_API_URL; drop the hardcoded vendor email endpoint
- Drive WebSocket CORS from CORS_ORIGINS instead of origin:'*'
- Load .env before any Nest module is imported (src/load-env.ts). Decorator
arguments evaluate at import time, so the gateway previously froze its CORS
config to the localhost fallback even when CORS_ORIGINS was set
- Add boot-time env validation: missing required vars, weak JWT_SECRET, and
inverted access/refresh token lifetimes now abort startup
- Enable Redis TLS certificate verification
- Require ADMIN_EMAIL/ADMIN_PASSWORD for the seed; remove the published
default super-admin credentials and stop printing them
- Add the initial Prisma migration and stop gitignoring prisma/migrations
- Make .env.example an accurate configuration contract (admin bootstrap,
REDIS_TLS, S3_ENDPOINT, 2FA key, Firebase path; drop the dead SMTP block)
- Add handover documentation: architecture, ER model, sequence and data-flow
diagrams, 2FA key rotation runbook
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com >
2026-08-04 16:03:08 +05:30
pradeepkumar
80c6fd1d71
feat: implement audit logging system with service, controller, and interceptor to track user actions across core services
2026-04-28 11:12:25 +05:30
pradeepkumar
625d1d669a
refactor: comment out agentTypeSections in seed script to prevent unintended application during bootstrap
2026-04-15 14:00:27 +05:30
pradeepkumar
d97657b475
refactor: remove auto-seeding logic for agent-type-specific sections to preserve admin customizations
2026-04-15 13:41:29 +05:30
pradeepkumar
e6e46fe616
fix
2026-04-15 13:40:22 +05:30
pradeepkumar
76ad688cd8
refactor: remove state abbreviations from location labels in US_CITIES_CO_NE_ND_SD data file
2026-04-14 12:08:14 +05:30
pradeepkumar
e434863b88
feat: add personal tagline field to seed data and update subsequent field sort orders
2026-04-14 10:11:03 +05:30
pradeepkumar
0b2bcd285a
feat: add Preferred Work Environment field and update subsequent field sort orders in seed script
2026-04-14 09:07:53 +05:30
pradeepkumar
756e803384
feat: add Real Estate Agency & Designation field group and update subsequent sort orders in seed script
2026-04-14 07:54:20 +05:30
pradeepkumar
2e8c097b7c
fix: remove unnecessary double quotes from hero section headline in seed data
2026-04-13 23:31:36 +05:30
pradeepkumar
e1a364dc5b
chore: remove description and helper text from seed data content
2026-04-12 16:18:35 +05:30
pradeepkumar
b66b5c963b
feat: add script and data to update state and city location options for CO, NE, ND, and SD
2026-04-12 00:01:21 +05:30
pradeepkumar
bebff19052
chore: update ctaButtonText in seed data to See All
2026-04-11 22:14:07 +05:30
pradeepkumar
400f9e6c4a
chore: remove obsolete testimonials CMS update script
2026-04-11 22:12:33 +05:30
pradeepkumar
e05a76a94f
fix: update landing page topProfessionals section content text
2026-04-11 22:10:51 +05:30
pradeepkumar
a435a3d25e
feat: update testimonials content and implement automatic CMS record updates during seeding
2026-04-11 21:44:38 +05:30
pradeepkumar
78133497b3
feat: implement per-user soft delete for conversations with automatic restoration on new messages
2026-04-10 16:48:12 +05:30
pradeepkumar
e5e1888615
ifx
2026-03-31 22:39:10 +05:30
pradeepkumar
b8d133783b
feat: implement per-user chat clearing by filtering messages based on new clearedAt timestamps
2026-03-28 20:25:15 +05:30
pradeepkumar
e9f135e9b7
fix
2026-03-26 15:18:59 +05:30
pradeepkumar
9c270a942c
feat: add featured agents data to the Prisma seed.
2026-03-23 11:25:56 +05:30
pradeepkumar
3e7e3683ed
feat: Introduce agent profile verification history tracking and status notifications for agents.
2026-03-21 08:55:57 +05:30
pradeepkumar
31439c3b06
feat: Add SUPER_ADMIN role with dedicated admin user management and updated access controls for existing admin features.
2026-03-20 17:05:40 +05:30
pradeepkumar
8e9d623f24
feat: Add contact form submission and message management functionality.
2026-03-20 12:42:16 +05:30
pradeepkumar
fcf90e8638
feat: implement conversation mute and favorite functionality with corresponding notification suppression.
2026-03-19 17:04:02 +05:30
pradeepkumar
82f1225e0a
feat: Populate directionsUrl in seed data with a Google Maps URL.
2026-03-19 13:50:38 +05:30
pradeepkumar
7260a9ca93
fix
2026-03-19 13:32:49 +05:30
pradeepkumar
76b7365dc3
feat: implement user reporting system with dedicated module, service, controller, DTOs, and Prisma schema updates.
2026-03-19 05:19:47 +05:30
pradeepkumar
c3a3df704e
feat: Implement real-time message delivery for conversations via WebSocket integration and update admin seed email.
2026-03-18 16:49:13 +05:30
pradeepkumar
b75c931393
feat: Add fallback default for stripePriceId in seed data.
2026-03-07 10:11:05 +05:30
pradeepkumar
d1e4e12510
feat: Implement Stripe integration for subscription management, including new services, controllers, Prisma models, and webhook handling.
2026-03-07 10:09:50 +05:30
pradeepkumar
399b8aa937
feat: implement support chat functionality with new module, service, controller, DTOs, and schema updates.
2026-03-05 06:37:07 +05:30
pradeepkumar
87671ce8b6
feat: Implement testimonials module with submission, link generation, and viewing functionalities.
2026-03-05 05:36:36 +05:30
pradeepkumar
7b8d6e3db8
feat: Implement in-app notifications with new database model, enhance Firebase initialization to support service account files, and add message read functionalities.
2026-02-25 06:45:27 +05:30
pradeepkumar
7ab5330a88
fix
2026-02-24 22:36:42 +05:30
pradeepkumar
49bd08c5fe
feat: Implement CMS module with API endpoints, data model, and initial seeding for landing page content.
2026-02-22 21:52:16 +05:30
pradeepkumar
789551e443
feat: Implement privacy preferences for users and agents with new database field, service methods, and API endpoints.
2026-02-09 00:55:55 +05:30
pradeepkumar
6ade2c74c5
feat: Implement notification preferences management for both users and agents.
2026-02-09 00:33:54 +05:30
pradeepkumar
3b1a7b999e
feat: Implement real-time messaging module with REST API endpoints and WebSocket gateway.
2026-02-08 22:44:16 +05:30
pradeepkumar
750cb55764
feat: Implement two-factor authentication (2FA) with dedicated endpoints for setup, enabling, disabling, verification, and backup code management.
2026-02-06 09:30:12 +05:30
pradeepkumar
93070474f1
feat: implement connection request management including schema, API endpoints, and business logic for users and agents.
2026-02-02 09:59:25 +05:30
pradeepkumar
497a1a4ba6
feat: Add isAvailable field to AgentProfile model and DTO for managing agent availability status.
2026-02-02 00:34:35 +05:30
pradeepkumar
4421a8fcbf
feat: Update Prisma seed script to populate missing options, validation, and UI config for existing profile fields.
2026-02-01 23:20:26 +05:30
pradeepkumar
eece0f7401
feat: Implement agent verification system with a new status enum, admin update functionality, and document retrieval.
2026-01-28 13:48:14 +05:30
pradeepkumar
9c7e21e1ad
fix
2026-01-24 22:31:12 +05:30
pradeepkumar
4397075715
fix
2026-01-24 22:19:26 +05:30
pradeepkumar
3b76a5aa50
fix
2026-01-24 21:39:14 +05:30
pradeepkumar
06dc78d57e
fix
2026-01-24 21:36:39 +05:30
pradeepkumar
8dc8a961ab
feat: Add 'Expertise' profile section to seed data, extend JWT token expiration times, and allow agents to retrieve profile sections by type.
2026-01-24 20:36:21 +05:30
pradeepkumar
7d7eb1ac31
feat: Introduce new profile sections and fields with detailed configurations and validation rules.
2026-01-24 15:32:54 +05:30
