Initial commit - Project start (July 17, 2025)

Original: feat: enhance security logging and ensure rate limit blocks are properly tracked - Add comprehensive logging for rate limit blocks with full request details - IP address (with proper proxy detection), user agent, headers, timestamps - Rate limit info (current count, limit, remaining, reset time) - Separate tracking for auth vs general endpoints - Enhance authentication failure logging - JWT validation failures with detailed error info - Admin auth attempts without token - Failed token validation with user context - All events include IP, path, method, user agent - Improve Winston logger configuration for production - Add automatic log rotation (10MB errors, 50MB combined) - Create separate security.log for auth/rate limit events - Ensure logs directory exists automatically - Add structured JSON format for log aggregation - Support container logging with LOG_TO_CONSOLE env var - Create comprehensive documentation - Security logging guide with examples - Monitoring recommendations - Configuration reference - Add test script to verify logging functionality All rate limit settings remain configurable via admin panel: - Window duration, max requests, auth limits - Skip authenticated requests option - Public endpoints only option 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <[email protected]>
2025-07-24 16:57:07 +02:00
commit 1773ed5f95
354 changed files with 61508 additions and 0 deletions
@@ -0,0 +1,105 @@
+const chokidar = require('chokidar');
+const path = require('path');
+const fs = require('fs').promises;
+const { db } = require('../database/db');
+const { formatBoolean } = require('../utils/dbCompat');
+const { generateThumbnail } = require('./imageProcessor');
+const logger = require('../utils/logger');
+
+const getStoragePath = () => process.env.STORAGE_PATH || path.join(__dirname, '../../../storage');
+const WATCH_PATH = () => path.join(getStoragePath(), 'events/active');
+
+function startFileWatcher() {
+  const watcher = chokidar.watch(WATCH_PATH(), {
+    ignored: /(^|[\/\\])\../, // ignore dotfiles
+    persistent: true,
+    awaitWriteFinish: {
+      stabilityThreshold: 2000,
+      pollInterval: 100
+    }
+  });
+
+  watcher
+    .on('add', async (filePath) => {
+      try {
+        await processNewPhoto(filePath);
+      } catch (error) {
+        logger.error('Error processing new photo:', error);
+      }
+    })
+    .on('unlink', async (filePath) => {
+      try {
+        await removePhoto(filePath);
+      } catch (error) {
+        logger.error('Error removing photo:', error);
+      }
+    });
+
+  logger.info('File watcher started');
+}
+
+async function processNewPhoto(filePath) {
+  const relativePath = path.relative(WATCH_PATH(), filePath);
+  const pathParts = relativePath.split(path.sep);
+  
+  if (pathParts.length < 2) return; // Not in correct folder structure
+  
+  const eventSlug = pathParts[0];
+  const photoType = pathParts[1] === 'collages' ? 'collage' : 'individual';
+  
+  // Check if this is an image file
+  const ext = path.extname(filePath).toLowerCase();
+  if (!['.jpg', '.jpeg', '.png', '.webp'].includes(ext)) return;
+  
+  // Skip temporary upload files
+  const filename = path.basename(filePath);
+  if (filename.startsWith('temp_')) {
+    logger.debug(`Skipping temporary upload file: ${filename}`);
+    return;
+  }
+  
+  // Find the event
+  const event = await db('events').where({ slug: eventSlug, is_active: formatBoolean(true) }).first();
+  if (!event) return;
+  
+  // Get file stats
+  const stats = await fs.stat(filePath);
+  
+  // Generate thumbnail
+  const thumbnailPath = await generateThumbnail(filePath);
+  
+  // Calculate relative thumbnail path
+  const relativeThumbPath = thumbnailPath; // thumbnailPath is already relative to storage root
+  
+  // Check if photo already exists
+  const existingPhoto = await db('photos')
+    .where({ event_id: event.id, filename: path.basename(filePath) })
+    .first();
+  
+  if (!existingPhoto) {
+    // Add to database
+    await db('photos').insert({
+      event_id: event.id,
+      filename: path.basename(filePath),
+      path: relativePath,
+      thumbnail_path: relativeThumbPath,
+      type: photoType,
+      size_bytes: stats.size
+    });
+    
+    logger.info(`Added new photo: ${relativePath}`);
+  } else {
+    logger.debug(`Photo already exists: ${relativePath}`);
+  }
+}
+
+async function removePhoto(filePath) {
+  const relativePath = path.relative(WATCH_PATH(), filePath);
+  
+  // Remove from database
+  await db('photos').where({ path: relativePath }).delete();
+  
+  logger.info(`Removed photo: ${relativePath}`);
+}
+
+module.exports = { startFileWatcher };