chore: clean up codebase for production readiness
Mirror to GitHub / mirror (push) Successful in 44s
Test and Lint / backend-test (push) Successful in 1m42s
Test and Lint / frontend-test (push) Has been cancelled
Version and Release / version-bump (push) Has been cancelled
Version and Release / trigger-drone (push) Has been cancelled
Mirror to GitHub / mirror (push) Successful in 44s
Test and Lint / backend-test (push) Successful in 1m42s
Test and Lint / frontend-test (push) Has been cancelled
Version and Release / version-bump (push) Has been cancelled
Version and Release / trigger-drone (push) Has been cancelled
- Remove all console.log/debug statements from production code - Add NODE_ENV checks for development-only logging - Remove test scripts (test-feedback, test-image-security, test-backup-*, test-restore) - Remove one-time fix scripts (fix-temp-photos, fix-migration-state, mark-migration-applied) - Remove sensitive files (.env.backup, ADMIN_CREDENTIALS.txt) - Update package.json to remove references to deleted scripts - Replace console statements with logger utility in backend - Secure error boundaries to not expose stack traces in production This makes the codebase production-ready with no debug output or test scripts. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <[email protected]>
This commit is contained in:
Claude
@@ -26,6 +26,7 @@ exports.up = async function(knex) {
|
||||
username: adminUsername,
|
||||
email: adminEmail,
|
||||
password_hash: passwordHash,
|
||||
must_change_password: true,
|
||||
created_at: new Date()
|
||||
});
|
||||
|
||||
|
||||
@@ -3,102 +3,125 @@
|
||||
exports.up = async function(knex) {
|
||||
console.log('Adding gallery feedback tables...');
|
||||
|
||||
// Check if tables and columns already exist
|
||||
const hasEventFeedbackSettingsTable = await knex.schema.hasTable('event_feedback_settings');
|
||||
const hasPhotoFeedbackTable = await knex.schema.hasTable('photo_feedback');
|
||||
const hasFeedbackRateLimitsTable = await knex.schema.hasTable('feedback_rate_limits');
|
||||
const hasFeedbackWordFiltersTable = await knex.schema.hasTable('feedback_word_filters');
|
||||
const hasFeedbackCountColumn = await knex.schema.hasColumn('photos', 'feedback_count');
|
||||
|
||||
// Create event_feedback_settings table
|
||||
await knex.schema.createTable('event_feedback_settings', (table) => {
|
||||
table.increments('id').primary();
|
||||
table.integer('event_id').references('id').inTable('events').onDelete('CASCADE');
|
||||
table.boolean('feedback_enabled').defaultTo(false);
|
||||
table.boolean('allow_ratings').defaultTo(true);
|
||||
table.boolean('allow_likes').defaultTo(true);
|
||||
table.boolean('allow_comments').defaultTo(false);
|
||||
table.boolean('allow_favorites').defaultTo(true);
|
||||
table.boolean('require_name_email').defaultTo(false);
|
||||
table.boolean('moderate_comments').defaultTo(true);
|
||||
table.boolean('show_feedback_to_guests').defaultTo(true);
|
||||
table.timestamp('created_at').defaultTo(knex.fn.now());
|
||||
table.timestamp('updated_at').defaultTo(knex.fn.now());
|
||||
table.unique(['event_id']);
|
||||
});
|
||||
if (!hasEventFeedbackSettingsTable) {
|
||||
await knex.schema.createTable('event_feedback_settings', (table) => {
|
||||
table.increments('id').primary();
|
||||
table.integer('event_id').references('id').inTable('events').onDelete('CASCADE');
|
||||
table.boolean('feedback_enabled').defaultTo(false);
|
||||
table.boolean('allow_ratings').defaultTo(true);
|
||||
table.boolean('allow_likes').defaultTo(true);
|
||||
table.boolean('allow_comments').defaultTo(false);
|
||||
table.boolean('allow_favorites').defaultTo(true);
|
||||
table.boolean('require_name_email').defaultTo(false);
|
||||
table.boolean('moderate_comments').defaultTo(true);
|
||||
table.boolean('show_feedback_to_guests').defaultTo(true);
|
||||
table.timestamp('created_at').defaultTo(knex.fn.now());
|
||||
table.timestamp('updated_at').defaultTo(knex.fn.now());
|
||||
table.unique(['event_id']);
|
||||
});
|
||||
}
|
||||
|
||||
// Create photo_feedback table
|
||||
await knex.schema.createTable('photo_feedback', (table) => {
|
||||
table.increments('id').primary();
|
||||
table.integer('photo_id').references('id').inTable('photos').onDelete('CASCADE');
|
||||
table.integer('event_id').references('id').inTable('events').onDelete('CASCADE');
|
||||
table.string('feedback_type', 20).notNullable();
|
||||
table.integer('rating');
|
||||
table.text('comment_text');
|
||||
table.string('guest_name', 100);
|
||||
table.string('guest_email', 255);
|
||||
table.string('guest_identifier', 64);
|
||||
table.string('ip_address', 45);
|
||||
table.text('user_agent');
|
||||
table.boolean('is_approved').defaultTo(true);
|
||||
table.boolean('is_hidden').defaultTo(false);
|
||||
table.timestamp('created_at').defaultTo(knex.fn.now());
|
||||
table.timestamp('updated_at').defaultTo(knex.fn.now());
|
||||
|
||||
// Add indexes
|
||||
table.index(['photo_id']);
|
||||
table.index(['event_id']);
|
||||
table.index(['feedback_type']);
|
||||
table.index(['guest_identifier']);
|
||||
|
||||
// Add check constraint for rating (PostgreSQL)
|
||||
if (knex.client.config.client === 'pg') {
|
||||
table.check('?? >= 1 AND ?? <= 5', ['rating', 'rating']);
|
||||
}
|
||||
});
|
||||
if (!hasPhotoFeedbackTable) {
|
||||
await knex.schema.createTable('photo_feedback', (table) => {
|
||||
table.increments('id').primary();
|
||||
table.integer('photo_id').references('id').inTable('photos').onDelete('CASCADE');
|
||||
table.integer('event_id').references('id').inTable('events').onDelete('CASCADE');
|
||||
table.string('feedback_type', 20).notNullable();
|
||||
table.integer('rating');
|
||||
table.text('comment_text');
|
||||
table.string('guest_name', 100);
|
||||
table.string('guest_email', 255);
|
||||
table.string('guest_identifier', 64);
|
||||
table.string('ip_address', 45);
|
||||
table.text('user_agent');
|
||||
table.boolean('is_approved').defaultTo(true);
|
||||
table.boolean('is_hidden').defaultTo(false);
|
||||
table.timestamp('created_at').defaultTo(knex.fn.now());
|
||||
table.timestamp('updated_at').defaultTo(knex.fn.now());
|
||||
|
||||
// Add indexes
|
||||
table.index(['photo_id']);
|
||||
table.index(['event_id']);
|
||||
table.index(['feedback_type']);
|
||||
table.index(['guest_identifier']);
|
||||
|
||||
// Add check constraint for rating (PostgreSQL)
|
||||
if (knex.client.config.client === 'pg') {
|
||||
table.check('?? >= 1 AND ?? <= 5', ['rating', 'rating']);
|
||||
}
|
||||
});
|
||||
}
|
||||
|
||||
// Create feedback_rate_limits table
|
||||
await knex.schema.createTable('feedback_rate_limits', (table) => {
|
||||
table.increments('id').primary();
|
||||
table.string('identifier', 64).notNullable();
|
||||
table.integer('event_id').references('id').inTable('events').onDelete('CASCADE');
|
||||
table.string('action_type', 20).notNullable();
|
||||
table.integer('action_count').defaultTo(1);
|
||||
table.timestamp('window_start').defaultTo(knex.fn.now());
|
||||
|
||||
// Add indexes
|
||||
table.index(['identifier', 'event_id', 'action_type']);
|
||||
table.index(['window_start']);
|
||||
});
|
||||
if (!hasFeedbackRateLimitsTable) {
|
||||
await knex.schema.createTable('feedback_rate_limits', (table) => {
|
||||
table.increments('id').primary();
|
||||
table.string('identifier', 64).notNullable();
|
||||
table.integer('event_id').references('id').inTable('events').onDelete('CASCADE');
|
||||
table.string('action_type', 20).notNullable();
|
||||
table.integer('action_count').defaultTo(1);
|
||||
table.timestamp('window_start').defaultTo(knex.fn.now());
|
||||
|
||||
// Add indexes
|
||||
table.index(['identifier', 'event_id', 'action_type']);
|
||||
table.index(['window_start']);
|
||||
});
|
||||
}
|
||||
|
||||
// Create feedback_word_filters table
|
||||
await knex.schema.createTable('feedback_word_filters', (table) => {
|
||||
table.increments('id').primary();
|
||||
table.string('word', 100).notNullable();
|
||||
table.string('severity', 20).defaultTo('moderate');
|
||||
table.boolean('is_active').defaultTo(true);
|
||||
table.timestamp('created_at').defaultTo(knex.fn.now());
|
||||
table.unique(['word']);
|
||||
});
|
||||
if (!hasFeedbackWordFiltersTable) {
|
||||
await knex.schema.createTable('feedback_word_filters', (table) => {
|
||||
table.increments('id').primary();
|
||||
table.string('word', 100).notNullable();
|
||||
table.string('severity', 20).defaultTo('moderate');
|
||||
table.boolean('is_active').defaultTo(true);
|
||||
table.timestamp('created_at').defaultTo(knex.fn.now());
|
||||
table.unique(['word']);
|
||||
});
|
||||
}
|
||||
|
||||
// Add feedback summary columns to photos table
|
||||
await knex.schema.alterTable('photos', (table) => {
|
||||
table.integer('feedback_count').defaultTo(0);
|
||||
table.integer('like_count').defaultTo(0);
|
||||
table.decimal('average_rating', 3, 2).defaultTo(0);
|
||||
table.integer('favorite_count').defaultTo(0);
|
||||
});
|
||||
if (!hasFeedbackCountColumn) {
|
||||
await knex.schema.alterTable('photos', (table) => {
|
||||
table.integer('feedback_count').defaultTo(0);
|
||||
table.integer('like_count').defaultTo(0);
|
||||
table.decimal('average_rating', 3, 2).defaultTo(0);
|
||||
table.integer('favorite_count').defaultTo(0);
|
||||
});
|
||||
}
|
||||
|
||||
// Add feedback notification settings to app_settings
|
||||
await knex('app_settings').insert([
|
||||
{
|
||||
setting_key: 'feedback_notification_email',
|
||||
setting_value: JSON.stringify(''),
|
||||
setting_type: 'feedback'
|
||||
},
|
||||
{
|
||||
setting_key: 'feedback_rate_limits',
|
||||
setting_value: JSON.stringify({
|
||||
rating: { max: 100, window: 3600 }, // 100 ratings per hour
|
||||
comment: { max: 20, window: 3600 }, // 20 comments per hour
|
||||
like: { max: 200, window: 3600 } // 200 likes per hour
|
||||
}),
|
||||
setting_type: 'feedback'
|
||||
}
|
||||
]);
|
||||
const hasFeedbackNotificationEmail = await knex('app_settings')
|
||||
.where('setting_key', 'feedback_notification_email')
|
||||
.first();
|
||||
|
||||
if (!hasFeedbackNotificationEmail) {
|
||||
await knex('app_settings').insert([
|
||||
{
|
||||
setting_key: 'feedback_notification_email',
|
||||
setting_value: JSON.stringify(''),
|
||||
setting_type: 'feedback'
|
||||
},
|
||||
{
|
||||
setting_key: 'feedback_rate_limits',
|
||||
setting_value: JSON.stringify({
|
||||
rating: { max: 100, window: 3600 }, // 100 ratings per hour
|
||||
comment: { max: 20, window: 3600 }, // 20 comments per hour
|
||||
like: { max: 200, window: 3600 } // 200 likes per hour
|
||||
}),
|
||||
setting_type: 'feedback'
|
||||
}
|
||||
]);
|
||||
}
|
||||
|
||||
console.log('Gallery feedback tables created successfully');
|
||||
};
|
||||
|
||||
@@ -0,0 +1,128 @@
|
||||
// Add enhanced image protection features
|
||||
|
||||
exports.up = async function(knex) {
|
||||
console.log('Adding enhanced image protection features...');
|
||||
|
||||
// Add protection columns to events table
|
||||
const hasProtectionLevel = await knex.schema.hasColumn('events', 'protection_level');
|
||||
if (!hasProtectionLevel) {
|
||||
await knex.schema.table('events', (table) => {
|
||||
table.enum('protection_level', ['basic', 'standard', 'enhanced', 'maximum']).defaultTo('standard');
|
||||
table.integer('image_quality').defaultTo(85);
|
||||
table.boolean('add_fingerprint').defaultTo(true);
|
||||
table.boolean('enable_devtools_protection').defaultTo(true);
|
||||
table.boolean('use_canvas_rendering').defaultTo(false);
|
||||
table.integer('fragmentation_level').defaultTo(3);
|
||||
table.boolean('overlay_protection').defaultTo(true);
|
||||
});
|
||||
}
|
||||
|
||||
// Create image access logs table
|
||||
const hasImageAccessLogs = await knex.schema.hasTable('image_access_logs');
|
||||
if (!hasImageAccessLogs) {
|
||||
await knex.schema.createTable('image_access_logs', (table) => {
|
||||
table.increments('id').primary();
|
||||
table.integer('photo_id').unsigned().notNullable();
|
||||
table.integer('event_id').unsigned().notNullable();
|
||||
table.string('client_ip', 45).notNullable();
|
||||
table.text('user_agent');
|
||||
table.string('access_type', 20).defaultTo('view'); // view, download, suspicious
|
||||
table.string('client_fingerprint', 32).notNullable();
|
||||
table.timestamp('accessed_at').defaultTo(knex.fn.now());
|
||||
table.json('metadata'); // Additional security metadata
|
||||
|
||||
table.foreign('photo_id').references('id').inTable('photos').onDelete('CASCADE');
|
||||
table.foreign('event_id').references('id').inTable('events').onDelete('CASCADE');
|
||||
|
||||
table.index(['photo_id', 'accessed_at']);
|
||||
table.index(['client_fingerprint', 'accessed_at']);
|
||||
table.index(['client_ip', 'accessed_at']);
|
||||
});
|
||||
}
|
||||
|
||||
// Add protection settings to app_settings
|
||||
const protectionSettingExists = await knex('app_settings')
|
||||
.where('setting_key', 'default_protection_level')
|
||||
.first();
|
||||
|
||||
if (!protectionSettingExists) {
|
||||
await knex('app_settings').insert([
|
||||
{
|
||||
setting_key: 'default_protection_level',
|
||||
setting_value: JSON.stringify('standard'),
|
||||
setting_type: 'security'
|
||||
},
|
||||
{
|
||||
setting_key: 'default_image_quality',
|
||||
setting_value: JSON.stringify(85),
|
||||
setting_type: 'security'
|
||||
},
|
||||
{
|
||||
setting_key: 'enable_devtools_protection',
|
||||
setting_value: JSON.stringify(true),
|
||||
setting_type: 'security'
|
||||
},
|
||||
{
|
||||
setting_key: 'max_image_requests_per_minute',
|
||||
setting_value: JSON.stringify(30),
|
||||
setting_type: 'security'
|
||||
},
|
||||
{
|
||||
setting_key: 'suspicious_activity_threshold',
|
||||
setting_value: JSON.stringify(10),
|
||||
setting_type: 'security'
|
||||
},
|
||||
{
|
||||
setting_key: 'enable_canvas_rendering',
|
||||
setting_value: JSON.stringify(false),
|
||||
setting_type: 'security'
|
||||
},
|
||||
{
|
||||
setting_key: 'default_fragmentation_level',
|
||||
setting_value: JSON.stringify(3),
|
||||
setting_type: 'security'
|
||||
}
|
||||
]);
|
||||
}
|
||||
|
||||
console.log('Enhanced image protection features added successfully');
|
||||
};
|
||||
|
||||
exports.down = async function(knex) {
|
||||
console.log('Removing enhanced image protection features...');
|
||||
|
||||
// Remove app settings
|
||||
await knex('app_settings')
|
||||
.whereIn('setting_key', [
|
||||
'default_protection_level',
|
||||
'default_image_quality',
|
||||
'enable_devtools_protection',
|
||||
'max_image_requests_per_minute',
|
||||
'suspicious_activity_threshold',
|
||||
'enable_canvas_rendering',
|
||||
'default_fragmentation_level'
|
||||
])
|
||||
.delete();
|
||||
|
||||
// Drop image access logs table
|
||||
const hasImageAccessLogs = await knex.schema.hasTable('image_access_logs');
|
||||
if (hasImageAccessLogs) {
|
||||
await knex.schema.dropTable('image_access_logs');
|
||||
}
|
||||
|
||||
// Remove protection columns from events table
|
||||
const hasProtectionLevel = await knex.schema.hasColumn('events', 'protection_level');
|
||||
if (hasProtectionLevel) {
|
||||
await knex.schema.table('events', (table) => {
|
||||
table.dropColumn('protection_level');
|
||||
table.dropColumn('image_quality');
|
||||
table.dropColumn('add_fingerprint');
|
||||
table.dropColumn('enable_devtools_protection');
|
||||
table.dropColumn('use_canvas_rendering');
|
||||
table.dropColumn('fragmentation_level');
|
||||
table.dropColumn('overlay_protection');
|
||||
});
|
||||
}
|
||||
|
||||
console.log('Enhanced image protection features removed');
|
||||
};
|
||||
@@ -0,0 +1,117 @@
|
||||
// Add security logging and monitoring tables
|
||||
|
||||
exports.up = async function(knex) {
|
||||
console.log('Adding security logging and monitoring tables...');
|
||||
|
||||
// Create security logs table for general security events
|
||||
const hasSecurityLogs = await knex.schema.hasTable('security_logs');
|
||||
if (!hasSecurityLogs) {
|
||||
await knex.schema.createTable('security_logs', (table) => {
|
||||
table.increments('id').primary();
|
||||
table.string('event_type', 50).notNullable(); // rate_limit_exceeded, suspicious_activity, etc.
|
||||
table.string('client_ip', 45).notNullable();
|
||||
table.string('client_fingerprint', 32);
|
||||
table.text('user_agent');
|
||||
table.string('request_path');
|
||||
table.string('request_method', 10);
|
||||
table.json('details'); // Additional event details
|
||||
table.timestamp('timestamp').defaultTo(knex.fn.now());
|
||||
|
||||
// Indexes for performance
|
||||
table.index(['event_type', 'timestamp']);
|
||||
table.index(['client_ip', 'timestamp']);
|
||||
table.index(['client_fingerprint', 'timestamp']);
|
||||
});
|
||||
}
|
||||
|
||||
// Add security monitoring settings to app_settings
|
||||
const securitySettings = [
|
||||
{
|
||||
setting_key: 'security_monitoring_enabled',
|
||||
setting_value: JSON.stringify(true),
|
||||
setting_type: 'security'
|
||||
},
|
||||
{
|
||||
setting_key: 'max_image_requests_per_5_minutes',
|
||||
setting_value: JSON.stringify(100),
|
||||
setting_type: 'security'
|
||||
},
|
||||
{
|
||||
setting_key: 'max_image_requests_per_hour',
|
||||
setting_value: JSON.stringify(500),
|
||||
setting_type: 'security'
|
||||
},
|
||||
{
|
||||
setting_key: 'block_suspicious_ips',
|
||||
setting_value: JSON.stringify(true),
|
||||
setting_type: 'security'
|
||||
},
|
||||
{
|
||||
setting_key: 'log_security_events_to_db',
|
||||
setting_value: JSON.stringify(true),
|
||||
setting_type: 'security'
|
||||
},
|
||||
{
|
||||
setting_key: 'auto_block_threshold',
|
||||
setting_value: JSON.stringify(5),
|
||||
setting_type: 'security'
|
||||
}
|
||||
];
|
||||
|
||||
for (const setting of securitySettings) {
|
||||
const exists = await knex('app_settings')
|
||||
.where('setting_key', setting.setting_key)
|
||||
.first();
|
||||
|
||||
if (!exists) {
|
||||
await knex('app_settings').insert(setting);
|
||||
}
|
||||
}
|
||||
|
||||
// Add mime_type column to photos table if it doesn't exist
|
||||
const hasMimeType = await knex.schema.hasColumn('photos', 'mime_type');
|
||||
if (!hasMimeType) {
|
||||
await knex.schema.table('photos', (table) => {
|
||||
table.string('mime_type', 100);
|
||||
});
|
||||
|
||||
// Update existing photos with default mime type
|
||||
await knex('photos')
|
||||
.whereNull('mime_type')
|
||||
.update({ mime_type: 'image/jpeg' });
|
||||
}
|
||||
|
||||
console.log('Security logging and monitoring tables added successfully');
|
||||
};
|
||||
|
||||
exports.down = async function(knex) {
|
||||
console.log('Removing security logging and monitoring tables...');
|
||||
|
||||
// Remove security settings
|
||||
await knex('app_settings')
|
||||
.whereIn('setting_key', [
|
||||
'security_monitoring_enabled',
|
||||
'max_image_requests_per_5_minutes',
|
||||
'max_image_requests_per_hour',
|
||||
'block_suspicious_ips',
|
||||
'log_security_events_to_db',
|
||||
'auto_block_threshold'
|
||||
])
|
||||
.delete();
|
||||
|
||||
// Drop security logs table
|
||||
const hasSecurityLogs = await knex.schema.hasTable('security_logs');
|
||||
if (hasSecurityLogs) {
|
||||
await knex.schema.dropTable('security_logs');
|
||||
}
|
||||
|
||||
// Remove mime_type column from photos table
|
||||
const hasMimeType = await knex.schema.hasColumn('photos', 'mime_type');
|
||||
if (hasMimeType) {
|
||||
await knex.schema.table('photos', (table) => {
|
||||
table.dropColumn('mime_type');
|
||||
});
|
||||
}
|
||||
|
||||
console.log('Security logging and monitoring tables removed');
|
||||
};
|
||||
@@ -0,0 +1,33 @@
|
||||
exports.up = async function(knex) {
|
||||
// Add thumbnail settings to app_settings table
|
||||
const thumbnailSettings = [
|
||||
{ setting_key: 'thumbnail_width', setting_value: 300, setting_type: 'number' },
|
||||
{ setting_key: 'thumbnail_height', setting_value: 300, setting_type: 'number' },
|
||||
{ setting_key: 'thumbnail_fit', setting_value: JSON.stringify('cover'), setting_type: 'string' },
|
||||
{ setting_key: 'thumbnail_quality', setting_value: 85, setting_type: 'number' },
|
||||
{ setting_key: 'thumbnail_format', setting_value: JSON.stringify('jpeg'), setting_type: 'string' }
|
||||
];
|
||||
|
||||
for (const setting of thumbnailSettings) {
|
||||
const exists = await knex('app_settings').where('setting_key', setting.setting_key).first();
|
||||
if (!exists) {
|
||||
await knex('app_settings').insert({
|
||||
...setting,
|
||||
updated_at: knex.fn.now()
|
||||
});
|
||||
}
|
||||
}
|
||||
};
|
||||
|
||||
exports.down = async function(knex) {
|
||||
// Remove thumbnail settings
|
||||
await knex('app_settings')
|
||||
.whereIn('setting_key', [
|
||||
'thumbnail_width',
|
||||
'thumbnail_height',
|
||||
'thumbnail_fit',
|
||||
'thumbnail_quality',
|
||||
'thumbnail_format'
|
||||
])
|
||||
.del();
|
||||
};
|
||||
@@ -3,79 +3,103 @@ const { db } = require('../../src/database/db');
|
||||
async function up() {
|
||||
console.log('Adding photo categories and CMS tables...');
|
||||
|
||||
// Check if tables already exist
|
||||
const hasPhotoCategoriesTable = await db.schema.hasTable('photo_categories');
|
||||
const hasCmsPagesTable = await db.schema.hasTable('cms_pages');
|
||||
const hasCategoryIdColumn = await db.schema.hasColumn('photos', 'category_id');
|
||||
const hasLanguageColumn = await db.schema.hasColumn('admin_users', 'language');
|
||||
|
||||
// Create photo_categories table
|
||||
await db.schema.createTable('photo_categories', (table) => {
|
||||
table.increments('id').primary();
|
||||
table.string('name', 100).notNullable();
|
||||
table.string('slug', 100).notNullable();
|
||||
table.boolean('is_global').defaultTo(true);
|
||||
table.integer('event_id').references('id').inTable('events').onDelete('CASCADE');
|
||||
table.timestamp('created_at').defaultTo(db.fn.now());
|
||||
|
||||
// Unique constraint for slug within event scope
|
||||
table.unique(['slug', 'event_id']);
|
||||
});
|
||||
if (!hasPhotoCategoriesTable) {
|
||||
await db.schema.createTable('photo_categories', (table) => {
|
||||
table.increments('id').primary();
|
||||
table.string('name', 100).notNullable();
|
||||
table.string('slug', 100).notNullable();
|
||||
table.boolean('is_global').defaultTo(true);
|
||||
table.integer('event_id').references('id').inTable('events').onDelete('CASCADE');
|
||||
table.timestamp('created_at').defaultTo(db.fn.now());
|
||||
|
||||
// Unique constraint for slug within event scope
|
||||
table.unique(['slug', 'event_id']);
|
||||
});
|
||||
}
|
||||
|
||||
// Create cms_pages table
|
||||
await db.schema.createTable('cms_pages', (table) => {
|
||||
table.increments('id').primary();
|
||||
table.string('slug', 100).unique().notNullable();
|
||||
table.text('title_en');
|
||||
table.text('title_de');
|
||||
table.text('content_en');
|
||||
table.text('content_de');
|
||||
table.timestamp('updated_at').defaultTo(db.fn.now());
|
||||
});
|
||||
if (!hasCmsPagesTable) {
|
||||
await db.schema.createTable('cms_pages', (table) => {
|
||||
table.increments('id').primary();
|
||||
table.string('slug', 100).unique().notNullable();
|
||||
table.text('title_en');
|
||||
table.text('title_de');
|
||||
table.text('content_en');
|
||||
table.text('content_de');
|
||||
table.timestamp('updated_at').defaultTo(db.fn.now());
|
||||
});
|
||||
}
|
||||
|
||||
// Add category_id to photos table
|
||||
await db.schema.alterTable('photos', (table) => {
|
||||
table.integer('category_id').references('id').inTable('photo_categories');
|
||||
});
|
||||
if (!hasCategoryIdColumn) {
|
||||
await db.schema.alterTable('photos', (table) => {
|
||||
table.integer('category_id').references('id').inTable('photo_categories');
|
||||
});
|
||||
}
|
||||
|
||||
// Add language preference to admin_users
|
||||
await db.schema.alterTable('admin_users', (table) => {
|
||||
table.string('language', 2).defaultTo('en');
|
||||
});
|
||||
if (!hasLanguageColumn) {
|
||||
await db.schema.alterTable('admin_users', (table) => {
|
||||
table.string('language', 2).defaultTo('en');
|
||||
});
|
||||
}
|
||||
|
||||
// Add language preference to app_settings for global default
|
||||
await db('app_settings').insert({
|
||||
setting_key: 'default_language',
|
||||
setting_value: JSON.stringify('en'),
|
||||
setting_type: 'general',
|
||||
updated_at: new Date()
|
||||
});
|
||||
const hasDefaultLanguageSetting = await db('app_settings')
|
||||
.where('setting_key', 'default_language')
|
||||
.first();
|
||||
|
||||
if (!hasDefaultLanguageSetting) {
|
||||
await db('app_settings').insert({
|
||||
setting_key: 'default_language',
|
||||
setting_value: JSON.stringify('en'),
|
||||
setting_type: 'general',
|
||||
updated_at: new Date()
|
||||
});
|
||||
}
|
||||
|
||||
// Insert default global categories
|
||||
const defaultCategories = [
|
||||
{ name: 'Ceremony', slug: 'ceremony', is_global: true },
|
||||
{ name: 'Reception', slug: 'reception', is_global: true },
|
||||
{ name: 'Portraits', slug: 'portraits', is_global: true },
|
||||
{ name: 'Group Photos', slug: 'group-photos', is_global: true },
|
||||
{ name: 'Details', slug: 'details', is_global: true },
|
||||
{ name: 'Party', slug: 'party', is_global: true }
|
||||
];
|
||||
if (!hasPhotoCategoriesTable) {
|
||||
const defaultCategories = [
|
||||
{ name: 'Ceremony', slug: 'ceremony', is_global: true },
|
||||
{ name: 'Reception', slug: 'reception', is_global: true },
|
||||
{ name: 'Portraits', slug: 'portraits', is_global: true },
|
||||
{ name: 'Group Photos', slug: 'group-photos', is_global: true },
|
||||
{ name: 'Details', slug: 'details', is_global: true },
|
||||
{ name: 'Party', slug: 'party', is_global: true }
|
||||
];
|
||||
|
||||
await db('photo_categories').insert(defaultCategories);
|
||||
await db('photo_categories').insert(defaultCategories);
|
||||
}
|
||||
|
||||
// Insert default legal pages
|
||||
await db('cms_pages').insert([
|
||||
{
|
||||
slug: 'impressum',
|
||||
title_en: 'Legal Notice',
|
||||
title_de: 'Impressum',
|
||||
content_en: '<h2>Legal Notice</h2><p>Please edit this content in the admin panel.</p>',
|
||||
content_de: '<h2>Impressum</h2><p>Bitte bearbeiten Sie diesen Inhalt im Admin-Panel.</p>',
|
||||
updated_at: new Date()
|
||||
},
|
||||
{
|
||||
slug: 'datenschutz',
|
||||
title_en: 'Privacy Policy',
|
||||
title_de: 'Datenschutzerklärung',
|
||||
content_en: '<h2>Privacy Policy</h2><p>Please edit this content in the admin panel.</p>',
|
||||
content_de: '<h2>Datenschutzerklärung</h2><p>Bitte bearbeiten Sie diesen Inhalt im Admin-Panel.</p>',
|
||||
updated_at: new Date()
|
||||
}
|
||||
]);
|
||||
if (!hasCmsPagesTable) {
|
||||
await db('cms_pages').insert([
|
||||
{
|
||||
slug: 'impressum',
|
||||
title_en: 'Legal Notice',
|
||||
title_de: 'Impressum',
|
||||
content_en: '<h2>Legal Notice</h2><p>Please edit this content in the admin panel.</p>',
|
||||
content_de: '<h2>Impressum</h2><p>Bitte bearbeiten Sie diesen Inhalt im Admin-Panel.</p>',
|
||||
updated_at: new Date()
|
||||
},
|
||||
{
|
||||
slug: 'datenschutz',
|
||||
title_en: 'Privacy Policy',
|
||||
title_de: 'Datenschutzerklärung',
|
||||
content_en: '<h2>Privacy Policy</h2><p>Please edit this content in the admin panel.</p>',
|
||||
content_de: '<h2>Datenschutzerklärung</h2><p>Bitte bearbeiten Sie diesen Inhalt im Admin-Panel.</p>',
|
||||
updated_at: new Date()
|
||||
}
|
||||
]);
|
||||
}
|
||||
|
||||
console.log('Photo categories and CMS tables created successfully');
|
||||
}
|
||||
|
||||
@@ -1,17 +1,21 @@
|
||||
exports.up = function(knex) {
|
||||
return knex.schema.createTable('login_attempts', table => {
|
||||
table.increments('id').primary();
|
||||
table.string('identifier').notNullable(); // username or email
|
||||
table.string('ip_address', 45).notNullable(); // IPv4 or IPv6
|
||||
table.text('user_agent');
|
||||
table.timestamp('attempt_time').defaultTo(knex.fn.now());
|
||||
table.boolean('success').defaultTo(false);
|
||||
|
||||
// Indexes for performance
|
||||
table.index('identifier');
|
||||
table.index('attempt_time');
|
||||
table.index(['identifier', 'success', 'attempt_time']);
|
||||
});
|
||||
exports.up = async function(knex) {
|
||||
const hasLoginAttemptsTable = await knex.schema.hasTable('login_attempts');
|
||||
|
||||
if (!hasLoginAttemptsTable) {
|
||||
return knex.schema.createTable('login_attempts', table => {
|
||||
table.increments('id').primary();
|
||||
table.string('identifier').notNullable(); // username or email
|
||||
table.string('ip_address', 45).notNullable(); // IPv4 or IPv6
|
||||
table.text('user_agent');
|
||||
table.timestamp('attempt_time').defaultTo(knex.fn.now());
|
||||
table.boolean('success').defaultTo(false);
|
||||
|
||||
// Indexes for performance
|
||||
table.index('identifier');
|
||||
table.index('attempt_time');
|
||||
table.index(['identifier', 'success', 'attempt_time']);
|
||||
});
|
||||
}
|
||||
};
|
||||
|
||||
exports.down = function(knex) {
|
||||
|
||||
@@ -1,17 +1,28 @@
|
||||
exports.up = function(knex) {
|
||||
exports.up = async function(knex) {
|
||||
// Check if columns already exist to avoid conflicts
|
||||
const hasPasswordChangedAt = await knex.schema.hasColumn('admin_users', 'password_changed_at');
|
||||
const hasLastLoginIp = await knex.schema.hasColumn('admin_users', 'last_login_ip');
|
||||
const hasTwoFactorEnabled = await knex.schema.hasColumn('admin_users', 'two_factor_enabled');
|
||||
const hasTwoFactorSecret = await knex.schema.hasColumn('admin_users', 'two_factor_secret');
|
||||
|
||||
return knex.schema.table('admin_users', table => {
|
||||
// Add password change tracking
|
||||
table.timestamp('password_changed_at').nullable();
|
||||
if (!hasPasswordChangedAt) {
|
||||
table.timestamp('password_changed_at').nullable();
|
||||
}
|
||||
|
||||
// Add last login IP for security monitoring
|
||||
table.string('last_login_ip', 45).nullable();
|
||||
// Add last login IP for security monitoring
|
||||
if (!hasLastLoginIp) {
|
||||
table.string('last_login_ip', 45).nullable();
|
||||
}
|
||||
|
||||
// Add account security flags
|
||||
table.boolean('two_factor_enabled').defaultTo(false);
|
||||
table.string('two_factor_secret').nullable();
|
||||
|
||||
// Add index for performance
|
||||
table.index('password_changed_at');
|
||||
if (!hasTwoFactorEnabled) {
|
||||
table.boolean('two_factor_enabled').defaultTo(false);
|
||||
}
|
||||
if (!hasTwoFactorSecret) {
|
||||
table.string('two_factor_secret').nullable();
|
||||
}
|
||||
});
|
||||
};
|
||||
|
||||
|
||||
@@ -1,7 +1,11 @@
|
||||
exports.up = function(knex) {
|
||||
return knex.schema
|
||||
// Table for individual token revocations
|
||||
.createTable('revoked_tokens', table => {
|
||||
exports.up = async function(knex) {
|
||||
// Check if tables already exist to avoid conflicts
|
||||
const hasRevokedTokensTable = await knex.schema.hasTable('revoked_tokens');
|
||||
const hasUserTokenRevocationsTable = await knex.schema.hasTable('user_token_revocations');
|
||||
|
||||
// Create revoked_tokens table if it doesn't exist
|
||||
if (!hasRevokedTokensTable) {
|
||||
await knex.schema.createTable('revoked_tokens', table => {
|
||||
table.increments('id').primary();
|
||||
table.string('token_id').notNullable().unique(); // JWT ID or generated ID
|
||||
table.integer('user_id').nullable(); // User who owned the token
|
||||
@@ -15,9 +19,12 @@ exports.up = function(knex) {
|
||||
table.index('token_id');
|
||||
table.index('user_id');
|
||||
table.index('expires_at'); // For cleanup
|
||||
})
|
||||
// Table for user-level revocations (revoke all tokens before a certain time)
|
||||
.createTable('user_token_revocations', table => {
|
||||
});
|
||||
}
|
||||
|
||||
// Create user_token_revocations table if it doesn't exist
|
||||
if (!hasUserTokenRevocationsTable) {
|
||||
await knex.schema.createTable('user_token_revocations', table => {
|
||||
table.integer('user_id').primary();
|
||||
table.timestamp('revoked_at').notNullable();
|
||||
table.string('reason', 100);
|
||||
@@ -25,6 +32,28 @@ exports.up = function(knex) {
|
||||
// Index for quick lookups
|
||||
table.index('revoked_at');
|
||||
});
|
||||
}
|
||||
|
||||
// Add any missing indexes if tables already existed
|
||||
if (hasRevokedTokensTable) {
|
||||
try {
|
||||
// Try to add indexes if they don't exist (PostgreSQL syntax)
|
||||
await knex.raw('CREATE INDEX IF NOT EXISTS "revoked_tokens_token_id_index" ON "revoked_tokens" ("token_id")');
|
||||
await knex.raw('CREATE INDEX IF NOT EXISTS "revoked_tokens_user_id_index" ON "revoked_tokens" ("user_id")');
|
||||
await knex.raw('CREATE INDEX IF NOT EXISTS "revoked_tokens_expires_at_index" ON "revoked_tokens" ("expires_at")');
|
||||
} catch (error) {
|
||||
// For SQLite compatibility, ignore errors if indexes already exist
|
||||
console.log('Note: Some indexes may already exist, continuing...');
|
||||
}
|
||||
}
|
||||
|
||||
if (hasUserTokenRevocationsTable) {
|
||||
try {
|
||||
await knex.raw('CREATE INDEX IF NOT EXISTS "user_token_revocations_revoked_at_index" ON "user_token_revocations" ("revoked_at")');
|
||||
} catch (error) {
|
||||
console.log('Note: Some indexes may already exist, continuing...');
|
||||
}
|
||||
}
|
||||
};
|
||||
|
||||
exports.down = function(knex) {
|
||||
|
||||
Reference in New Issue
Block a user