Initial commit - Project start (July 17, 2025)

Original: feat: enhance security logging and ensure rate limit blocks are properly tracked - Add comprehensive logging for rate limit blocks with full request details - IP address (with proper proxy detection), user agent, headers, timestamps - Rate limit info (current count, limit, remaining, reset time) - Separate tracking for auth vs general endpoints - Enhance authentication failure logging - JWT validation failures with detailed error info - Admin auth attempts without token - Failed token validation with user context - All events include IP, path, method, user agent - Improve Winston logger configuration for production - Add automatic log rotation (10MB errors, 50MB combined) - Create separate security.log for auth/rate limit events - Ensure logs directory exists automatically - Add structured JSON format for log aggregation - Support container logging with LOG_TO_CONSOLE env var - Create comprehensive documentation - Security logging guide with examples - Monitoring recommendations - Configuration reference - Add test script to verify logging functionality All rate limit settings remain configurable via admin panel: - Window duration, max requests, auth limits - Skip authenticated requests option - Public endpoints only option 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <[email protected]>
2025-07-24 16:57:07 +02:00
commit 1773ed5f95
354 changed files with 61508 additions and 0 deletions
@@ -0,0 +1,93 @@
+import { api } from '../config/api';
+
+export interface AdminPhoto {
+  id: number;
+  filename: string;
+  path: string;
+  url: string;
+  thumbnail_url: string | null;
+  type: string;
+  category_id: number | null;
+  category_name: string | null;
+  category_slug: string | null;
+  size: number;
+  uploaded_at: string;
+  view_count?: number;
+  download_count?: number;
+}
+
+export interface PhotoFilters {
+  category_id?: number | null;
+  type?: string;
+  search?: string;
+  sort?: 'date' | 'name' | 'size';
+  order?: 'asc' | 'desc';
+}
+
+class PhotosService {
+  async getEventPhotos(eventId: number, filters?: PhotoFilters): Promise<AdminPhoto[]> {
+    const params = new URLSearchParams();
+    
+    if (filters) {
+      if (filters.category_id !== undefined) {
+        params.append('category_id', filters.category_id?.toString() || '');
+      }
+      if (filters.type) params.append('type', filters.type);
+      if (filters.search) params.append('search', filters.search);
+      if (filters.sort) params.append('sort', filters.sort);
+      if (filters.order) params.append('order', filters.order);
+    }
+    
+    const queryString = params.toString();
+    const url = `/admin/events/${eventId}/photos${queryString ? `?${queryString}` : ''}`;
+    
+    const response = await api.get(url);
+    
+    // Return photos as-is, URLs are already relative API paths
+    return response.data.photos;
+  }
+
+  async deletePhoto(eventId: number, photoId: number): Promise<void> {
+    await api.delete(`/admin/events/${eventId}/photos/${photoId}`);
+  }
+
+  async deletePhotos(eventId: number, photoIds: number[]): Promise<void> {
+    await api.post(`/admin/events/${eventId}/photos/bulk-delete`, { photoIds });
+  }
+
+  async updatePhotoCategory(eventId: number, photoId: number, categoryId: number | null): Promise<void> {
+    await api.patch(`/admin/events/${eventId}/photos/${photoId}`, { category_id: categoryId });
+  }
+
+  async updatePhotosCategory(eventId: number, photoIds: number[], categoryId: number | null): Promise<void> {
+    await api.post(`/admin/events/${eventId}/photos/bulk-update`, { 
+      photoIds, 
+      updates: { category_id: categoryId }
+    });
+  }
+
+  async downloadPhoto(eventId: number, photoId: number, filename: string): Promise<void> {
+    const response = await api.get(`/admin/events/${eventId}/photos/${photoId}/download`, {
+      responseType: 'blob'
+    });
+    
+    const url = window.URL.createObjectURL(new Blob([response.data]));
+    const link = document.createElement('a');
+    link.href = url;
+    link.download = filename;
+    document.body.appendChild(link);
+    link.click();
+    document.body.removeChild(link);
+    window.URL.revokeObjectURL(url);
+  }
+
+  formatBytes(bytes: number): string {
+    if (bytes === 0) return '0 Bytes';
+    const k = 1024;
+    const sizes = ['Bytes', 'KB', 'MB', 'GB'];
+    const i = Math.floor(Math.log(bytes) / Math.log(k));
+    return parseFloat((bytes / Math.pow(k, i)).toFixed(2)) + ' ' + sizes[i];
+  }
+}
+
+export const photosService = new PhotosService();