Initial commit - Project start (July 17, 2025)

Original: feat: enhance security logging and ensure rate limit blocks are properly tracked - Add comprehensive logging for rate limit blocks with full request details - IP address (with proper proxy detection), user agent, headers, timestamps - Rate limit info (current count, limit, remaining, reset time) - Separate tracking for auth vs general endpoints - Enhance authentication failure logging - JWT validation failures with detailed error info - Admin auth attempts without token - Failed token validation with user context - All events include IP, path, method, user agent - Improve Winston logger configuration for production - Add automatic log rotation (10MB errors, 50MB combined) - Create separate security.log for auth/rate limit events - Ensure logs directory exists automatically - Add structured JSON format for log aggregation - Support container logging with LOG_TO_CONSOLE env var - Create comprehensive documentation - Security logging guide with examples - Monitoring recommendations - Configuration reference - Add test script to verify logging functionality All rate limit settings remain configurable via admin panel: - Window duration, max requests, auth limits - Skip authenticated requests option - Public endpoints only option 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <[email protected]>
2025-07-24 16:57:07 +02:00
commit 1773ed5f95
354 changed files with 61508 additions and 0 deletions
@@ -0,0 +1,58 @@
+const axios = require('axios');
+const { db } = require('../database/db');
+
+async function verifyRecaptcha(token) {
+  // Check if reCAPTCHA is enabled
+  const settings = await db('app_settings')
+    .whereIn('setting_key', ['security_enable_recaptcha', 'security_recaptcha_secret_key'])
+    .select('setting_key', 'setting_value');
+  
+  const settingsMap = {};
+  settings.forEach(setting => {
+    try {
+      settingsMap[setting.setting_key] = JSON.parse(setting.setting_value);
+    } catch (e) {
+      settingsMap[setting.setting_key] = setting.setting_value;
+    }
+  });
+  
+  const isEnabled = settingsMap.security_enable_recaptcha === true || 
+                    settingsMap.security_enable_recaptcha === 'true';
+  const secretKey = settingsMap.security_recaptcha_secret_key;
+  
+  // If reCAPTCHA is not enabled, always return true
+  if (!isEnabled) {
+    return true;
+  }
+  
+  // If enabled but no token provided, fail
+  if (!token) {
+    return false;
+  }
+  
+  // If no secret key configured, log warning but pass
+  if (!secretKey) {
+    console.warn('reCAPTCHA enabled but no secret key configured');
+    return true;
+  }
+  
+  try {
+    const response = await axios.post(
+      'https://www.google.com/recaptcha/api/siteverify',
+      null,
+      {
+        params: {
+          secret: secretKey,
+          response: token
+        }
+      }
+    );
+    
+    return response.data.success === true;
+  } catch (error) {
+    console.error('reCAPTCHA verification error:', error);
+    return false;
+  }
+}
+
+module.exports = { verifyRecaptcha };