Initial commit - Project start (July 17, 2025)

Original: feat: enhance security logging and ensure rate limit blocks are properly tracked

- Add comprehensive logging for rate limit blocks with full request details
  - IP address (with proper proxy detection), user agent, headers, timestamps
  - Rate limit info (current count, limit, remaining, reset time)
  - Separate tracking for auth vs general endpoints

- Enhance authentication failure logging
  - JWT validation failures with detailed error info
  - Admin auth attempts without token
  - Failed token validation with user context
  - All events include IP, path, method, user agent

- Improve Winston logger configuration for production
  - Add automatic log rotation (10MB errors, 50MB combined)
  - Create separate security.log for auth/rate limit events
  - Ensure logs directory exists automatically
  - Add structured JSON format for log aggregation
  - Support container logging with LOG_TO_CONSOLE env var

- Create comprehensive documentation
  - Security logging guide with examples
  - Monitoring recommendations
  - Configuration reference

- Add test script to verify logging functionality

All rate limit settings remain configurable via admin panel:
- Window duration, max requests, auth limits
- Skip authenticated requests option
- Public endpoints only option

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

frontend/src/services/gallery.service.ts

@@ -0,0 +1,63 @@
+import { api } from '../config/api';
+import type { GalleryInfo, GalleryData, GalleryStats } from '../types';
+
+export const galleryService = {
+  // Verify share token
+  async verifyToken(slug: string, token: string): Promise<{ valid: boolean }> {
+    const response = await api.get<{ valid: boolean }>(`/gallery/${slug}/verify-token/${token}`);
+    return response.data;
+  },
+
+  // Get basic gallery info (no auth required)
+  async getGalleryInfo(slug: string, token?: string): Promise<GalleryInfo> {
+    const params = token ? { token } : {};
+    const response = await api.get<GalleryInfo>(`/gallery/${slug}/info`, { params });
+    return response.data;
+  },
+
+  // Get gallery photos (requires auth)
+  async getGalleryPhotos(slug: string): Promise<GalleryData> {
+    const response = await api.get<GalleryData>(`/gallery/${slug}/photos`);
+    return response.data;
+  },
+
+  // Download single photo
+  async downloadPhoto(slug: string, photoId: number, filename: string): Promise<void> {
+    const response = await api.get(`/gallery/${slug}/download/${photoId}`, {
+      responseType: 'blob',
+    });
+
+    // Create download link
+    const url = window.URL.createObjectURL(new Blob([response.data]));
+    const link = document.createElement('a');
+    link.href = url;
+    link.setAttribute('download', filename);
+    document.body.appendChild(link);
+    link.click();
+    link.remove();
+    window.URL.revokeObjectURL(url);
+  },
+
+  // Download all photos as ZIP
+  async downloadAllPhotos(slug: string): Promise<void> {
+    const response = await api.get(`/gallery/${slug}/download-all`, {
+      responseType: 'blob',
+    });
+
+    // Create download link
+    const url = window.URL.createObjectURL(new Blob([response.data]));
+    const link = document.createElement('a');
+    link.href = url;
+    link.setAttribute('download', `${slug}.zip`);
+    document.body.appendChild(link);
+    link.click();
+    link.remove();
+    window.URL.revokeObjectURL(url);
+  },
+
+  // Get gallery statistics
+  async getGalleryStats(slug: string): Promise<GalleryStats> {
+    const response = await api.get<GalleryStats>(`/gallery/${slug}/stats`);
+    return response.data;
+  },
+};