Initial commit - Project start (July 17, 2025)

Original: feat: enhance security logging and ensure rate limit blocks are properly tracked - Add comprehensive logging for rate limit blocks with full request details - IP address (with proper proxy detection), user agent, headers, timestamps - Rate limit info (current count, limit, remaining, reset time) - Separate tracking for auth vs general endpoints - Enhance authentication failure logging - JWT validation failures with detailed error info - Admin auth attempts without token - Failed token validation with user context - All events include IP, path, method, user agent - Improve Winston logger configuration for production - Add automatic log rotation (10MB errors, 50MB combined) - Create separate security.log for auth/rate limit events - Ensure logs directory exists automatically - Add structured JSON format for log aggregation - Support container logging with LOG_TO_CONSOLE env var - Create comprehensive documentation - Security logging guide with examples - Monitoring recommendations - Configuration reference - Add test script to verify logging functionality All rate limit settings remain configurable via admin panel: - Window duration, max requests, auth limits - Skip authenticated requests option - Public endpoints only option 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <[email protected]>
2025-07-24 16:57:07 +02:00
commit 1773ed5f95
354 changed files with 61508 additions and 0 deletions
@@ -0,0 +1,153 @@
+import React, { useEffect } from 'react';
+import { useParams, Link, useNavigate } from 'react-router-dom';
+import { useQuery } from '@tanstack/react-query';
+import { useTranslation } from 'react-i18next';
+import { ArrowLeft, Home } from 'lucide-react';
+import DOMPurify from 'dompurify';
+import { Loading, Card } from '../../components/common';
+import { cmsService } from '../../services/cms.service';
+import { api } from '../../config/api';
+import '../../styles/prose-overrides.css';
+
+export const LegalPage: React.FC = () => {
+  const { slug } = useParams<{ slug: string }>();
+  const { i18n } = useTranslation();
+  const navigate = useNavigate();
+  
+  // Extract page slug from pathname if not in params (for static routes like /impressum)
+  const pathname = window.location.pathname;
+  const pageSlug = slug || pathname.split('/').pop() || '';
+  
+  // Fetch settings to get default language
+  const { data: settingsData } = useQuery({
+    queryKey: ['public-settings'],
+    queryFn: async () => {
+      const response = await api.get('/public/settings');
+      return response.data;
+    },
+    staleTime: 5 * 60 * 1000, // Cache for 5 minutes
+  });
+
+  // Use admin settings language
+  const lang = settingsData?.default_language || 'en';
+
+  // Fetch page content
+  const { data: page, isLoading, error } = useQuery({
+    queryKey: ['legal-page', pageSlug, lang],
+    queryFn: () => cmsService.getPublicPage(pageSlug, lang),
+    enabled: !!pageSlug && pageSlug !== '' && !!settingsData,
+  });
+
+  // Set i18n language when settings are loaded
+  useEffect(() => {
+    if (settingsData?.default_language) {
+      i18n.changeLanguage(settingsData.default_language);
+    }
+  }, [settingsData, i18n]);
+
+  // Update page title
+  useEffect(() => {
+    if (page?.title) {
+      document.title = `${page.title} - PicPeak`;
+    }
+  }, [page?.title]);
+
+  if (isLoading) {
+    return (
+      <div className="min-h-screen bg-neutral-50 flex items-center justify-center">
+        <Loading size="lg" text="Loading..." />
+      </div>
+    );
+  }
+
+  if (error || !page) {
+    return (
+      <div className="min-h-screen bg-neutral-50 flex items-center justify-center">
+        <Card className="max-w-md w-full mx-4">
+          <div className="text-center py-12 px-6">
+            <h2 className="text-xl font-semibold mb-2">Page Not Found</h2>
+            <p className="text-neutral-600 mb-6">
+              The page you're looking for doesn't exist.
+            </p>
+            <Link
+              to="/"
+              className="inline-flex items-center gap-2 text-primary-600 hover:text-primary-700"
+            >
+              <Home className="w-4 h-4" />
+              Go to Homepage
+            </Link>
+          </div>
+        </Card>
+      </div>
+    );
+  }
+
+  return (
+    <div className="min-h-screen bg-neutral-50">
+      {/* Header */}
+      <header className="bg-white border-b border-neutral-200">
+        <div className="container py-4">
+          <button
+            onClick={() => navigate(-1)}
+            className="inline-flex items-center gap-2 text-neutral-600 hover:text-neutral-900 transition-colors"
+          >
+            <ArrowLeft className="w-4 h-4" />
+            {i18n.language === 'de' ? 'Zurück' : 'Back'}
+          </button>
+        </div>
+      </header>
+
+      {/* Content */}
+      <main className="container py-12">
+        <div className="max-w-4xl mx-auto">
+          <Card padding="lg">
+            <h1 className="text-3xl font-bold text-neutral-900 mb-8">{page.title}</h1>
+            
+            <div 
+              className="prose prose-neutral max-w-none"
+              dangerouslySetInnerHTML={{ 
+                __html: DOMPurify.sanitize(page.content, {
+                  ALLOWED_TAGS: [
+                    'p', 'br', 'h1', 'h2', 'h3', 'h4', 'h5', 'h6',
+                    'ul', 'ol', 'li', 'blockquote', 'a', 'em', 'strong',
+                    'code', 'pre', 'hr', 'div', 'span'
+                  ],
+                  ALLOWED_ATTR: ['href', 'target', 'rel', 'class', 'style'],
+                  ALLOW_DATA_ATTR: false,
+                  KEEP_CONTENT: true,
+                  ADD_TAGS: ['br'], // Explicitly allow br tags
+                  ADD_ATTR: ['style'], // Allow style for text alignment
+                })
+              }}
+            />
+            
+          </Card>
+        </div>
+      </main>
+
+      {/* Footer */}
+      <footer className="mt-auto py-8 border-t border-neutral-200">
+        <div className="container text-center">
+          <div className="flex justify-center gap-4 text-sm">
+            <Link
+              to="/impressum"
+              className="text-neutral-600 hover:text-neutral-900"
+            >
+              {lang === 'de' ? 'Impressum' : 'Legal Notice'}
+            </Link>
+            <span className="text-neutral-400">•</span>
+            <Link
+              to="/datenschutz"
+              className="text-neutral-600 hover:text-neutral-900"
+            >
+              {lang === 'de' ? 'Datenschutz' : 'Privacy Policy'}
+            </Link>
+          </div>
+          <p className="text-sm text-neutral-500 mt-4">
+            © 2024 PicPeak. All rights reserved.
+          </p>
+        </div>
+      </footer>
+    </div>
+  );
+};