NW
|
68d83807ad
|
refactor(arch): Phase 2 — deduplicate isAdmin, convertToUsd, getBaseWalletType
- #54: Extract isAdmin() to src/middleware/auth.js, remove duplicates from 7 admin handlers
- #55: Add WalletUtils.convertToUsd(), replace 8 switch-case blocks across 4 files
- #56: Unify getBaseWalletType() — keep only WalletUtils version (most complete),
remove duplicates from Wallet.js and userWalletsHandler.js
New file: src/middleware/auth.js
Net: -215 lines, +80 lines
Closes: #54, #55, #56
|
2026-06-17 22:10:34 +01:00 |
|
NW
|
de415633be
|
feat(security): Phase 1 — critical security fixes and hardening
- #42: Remove hardcoded ENCRYPTION_KEY fallback from config.js,
add startup validation for BOT_TOKEN and ENCRYPTION_KEY length
- #43: Fix SQL injection vulnerabilities — add ALLOWED_TABLES
whitelist in database.js, ALLOWED_USER_FIELDS in userService.js,
validate table names before PRAGMA
- #44: Fix race condition in purchaseService.js — wrap createPurchase
in BEGIN IMMEDIATE TRANSACTION, add atomic balance/stock checks
- #41: Move all secrets from docker-compose.yml to .env file,
use env_file directive
- #45: Replace MD5 tx_hash with crypto.randomUUID()
- #46: Upgrade KDF from SHA-256 to HKDF for mnemonic encryption,
add backward compatibility for legacy format
- #47: Add input validation across all handlers — walletType
whitelist, string length limits, numeric ID checks, price bounds
New files:
- src/utils/encryption.js (HKDF key derivation)
- src/__tests__/security.test.js (SQL injection prevention tests)
Closes: #41, #42, #43, #44, #45, #46, #47
|
2026-06-17 21:52:49 +01:00 |
|
|
|
23b7f8b4bd
|
big update WG-TOR bot connecting
|
2025-02-03 09:43:25 +00:00 |
|
|
|
633a27164b
|
upgrade comission wallet function
|
2025-01-26 22:21:13 +00:00 |
|
|
|
ae1cd45aea
|
create functional commission
|
2025-01-25 13:35:22 +00:00 |
|
|
|
fa09e81ddf
|
crypto mnemonic case
|
2025-01-25 01:13:10 +00:00 |
|
|
|
fcd89bc345
|
update calculate user balance in admin section
|
2025-01-09 20:13:45 +00:00 |
|
|
|
dd18e74529
|
update calculate user balance
|
2025-01-09 20:07:44 +00:00 |
|
|
|
f9356c6bbe
|
update user purchase list
|
2025-01-09 13:25:35 +00:00 |
|
|
|
18647091cf
|
minor edits to aesthetics and functionality
|
2025-01-08 18:26:50 +00:00 |
|
|
|
5ae148a2ba
|
update planned wallets function
|
2025-01-08 16:20:43 +00:00 |
|
|
|
66f5251795
|
update check ETH USDT USDC balance function
|
2025-01-08 12:01:02 +00:00 |
|
|
|
e64f185eda
|
separate wallet ETH USDT USDC
|
2025-01-02 19:31:28 +00:00 |
|
|
|
22f76c64a6
|
delet TRON wallet type
|
2025-01-02 16:19:39 +00:00 |
|
|
|
c9bcb09221
|
udpdate wallet function
|
2024-12-24 09:19:14 +00:00 |
|
|
|
3129525a1e
|
update user and admin wallet function
|
2024-12-23 20:44:56 +00:00 |
|
|
|
bfb9a55e36
|
update viev balance
|
2024-12-17 00:19:53 +00:00 |
|
|
|
4aebb4e41b
|
update user info page
|
2024-12-17 00:05:59 +00:00 |
|
|
|
a575f75faf
|
user catalog navigation upgrade
|
2024-12-16 23:56:09 +00:00 |
|
|
|
21465022b3
|
whallets upgrade function
|
2024-12-16 23:43:44 +00:00 |
|
|
|
d51bc9f0b9
|
User start registration update function
|
2024-12-16 12:37:44 +00:00 |
|
|
|
2cfa37ea86
|
fix bug back navigation
|
2024-12-15 02:04:43 +00:00 |
|
|
|
9d9e0e80ad
|
Bug update function
|
2024-12-14 23:12:36 +00:00 |
|
|
|
682246675e
|
update handleProductSelection
|
2024-12-14 15:06:22 +00:00 |
|
|
|
2aea225e2e
|
update back category
|
2024-12-14 15:02:50 +00:00 |
|
|
|
12d29c66b9
|
Update DistrictSelection back button
|
2024-12-14 13:16:22 +00:00 |
|
|
|
207b9a829c
|
delet subcatecory viev line
|
2024-12-14 13:10:23 +00:00 |
|
|
|
3843dcb094
|
Update handleBuyProduct
|
2024-12-14 13:07:46 +00:00 |
|
|
|
eea5d9b9e7
|
revert 99137e4e97
revert Update Detailed Product Viev
|
2024-12-14 12:54:50 +00:00 |
|
|
|
057d1536bb
|
Check bug delet category
|
2024-12-14 10:47:22 +00:00 |
|
|
|
99137e4e97
|
Update Detailed Product Viev
|
2024-12-14 00:37:24 +00:00 |
|
|
|
a400d12d16
|
Delet subcategory function in handleCategorySelection
|
2024-12-13 18:24:24 +00:00 |
|
|
|
95d5fe644d
|
Delet Subcategory Function
|
2024-12-13 16:41:41 +00:00 |
|
|
|
3e78e231f3
|
0 update adminHandlers
|
2024-12-13 13:41:49 +00:00 |
|
|
|
13a2d67474
|
rewrite sampleProduct
|
2024-12-05 18:43:00 +00:00 |
|
Artyom Ashirov
|
82ffa81141
|
account deletion
|
2024-12-05 21:29:32 +03:00 |
|
Artyom Ashirov
|
e3b82bb3dd
|
pay with main balance
|
2024-12-05 16:18:27 +03:00 |
|
|
|
ea7f5dbd11
|
Update handleCategoryUpdate
|
2024-11-25 23:58:05 +00:00 |
|
|
|
0d8230e93c
|
Add handleCategoryUpdate and handleEditCategory
|
2024-11-25 23:07:01 +00:00 |
|
Artyom Ashirov
|
64e6397570
|
bug fixes
|
2024-11-25 16:22:28 +03:00 |
|
Artyom Ashirov
|
5d4f56e265
|
refactoring
|
2024-11-23 05:03:30 +03:00 |
|
Artyom Ashirov
|
1f7d1a144c
|
bonus balance
|
2024-11-21 17:58:45 +03:00 |
|
Artyom Ashirov
|
a760cb2d23
|
Bonus balance editing
|
2024-11-21 14:48:45 +03:00 |
|
Artyom Ashirov
|
d4eb5d46c3
|
Zip error fix
|
2024-11-21 13:43:41 +03:00 |
|
Artyom Ashirov
|
627f9e417e
|
Old purchase method removed
|
2024-11-21 13:24:04 +03:00 |
|
Artyom Ashirov
|
1cb0467f6c
|
purchase viewing
|
2024-11-20 17:43:51 +03:00 |
|
Artyom Ashirov
|
6fa273f0b6
|
Item purchase
|
2024-11-19 05:01:13 +03:00 |
|
Artyom Ashirov
|
b45aa35527
|
Database import
|
2024-11-16 20:55:47 +03:00 |
|
Artyom Ashirov
|
e3f2e87fcc
|
export database
|
2024-11-16 19:18:50 +03:00 |
|
Artyom Ashirov
|
44ae5a6631
|
Delete photos after exit from card
|
2024-11-16 18:04:32 +03:00 |
|
