benya
85631b566a
All checks were successful
CI / test (push) Successful in 9m2s
Security hardening: - Added IP/user rate limiting with Redis-backed counters and fail-open behavior. - Added message anti-spam controls (per-chat rate + duplicate cooldown). - Implemented refresh token rotation with JTI tracking and revoke support. Notification pipeline: - Added Celery app and async notification tasks for mention/offline delivery. - Added Redis-based presence tracking and integrated it into realtime connect/disconnect. - Added notification dispatch from message flow and notifications listing endpoint. Quality gates and CI: - Added pytest async integration tests for auth and chat/message lifecycle. - Added pytest config, test fixtures, and GitHub Actions CI workflow. - Fixed bcrypt/passlib compatibility by pinning bcrypt version. - Documented worker and quality-gate commands in README.
41 lines
1.0 KiB
Plaintext
41 lines
1.0 KiB
Plaintext
APP_NAME=BenyaMessenger
|
|
ENVIRONMENT=development
|
|
DEBUG=true
|
|
API_V1_PREFIX=/api/v1
|
|
AUTO_CREATE_TABLES=true
|
|
|
|
SECRET_KEY=change-me-please-with-a-long-random-secret
|
|
JWT_ALGORITHM=HS256
|
|
ACCESS_TOKEN_EXPIRE_MINUTES=30
|
|
REFRESH_TOKEN_EXPIRE_DAYS=30
|
|
EMAIL_VERIFICATION_TOKEN_EXPIRE_HOURS=24
|
|
PASSWORD_RESET_TOKEN_EXPIRE_HOURS=1
|
|
|
|
POSTGRES_DSN=postgresql+asyncpg://postgres:postgres@localhost:5432/messenger
|
|
REDIS_URL=redis://localhost:6379/0
|
|
|
|
S3_ENDPOINT_URL=http://localhost:9000
|
|
S3_ACCESS_KEY=minioadmin
|
|
S3_SECRET_KEY=minioadmin
|
|
S3_REGION=us-east-1
|
|
S3_BUCKET_NAME=messenger-media
|
|
S3_PRESIGN_EXPIRE_SECONDS=900
|
|
MAX_UPLOAD_SIZE_BYTES=104857600
|
|
|
|
FRONTEND_BASE_URL=http://localhost:5173
|
|
|
|
SMTP_HOST=localhost
|
|
SMTP_PORT=1025
|
|
SMTP_USERNAME=
|
|
SMTP_PASSWORD=
|
|
SMTP_USE_TLS=false
|
|
SMTP_FROM_EMAIL=no-reply@benyamessenger.local
|
|
|
|
LOGIN_RATE_LIMIT_PER_MINUTE=10
|
|
REGISTER_RATE_LIMIT_PER_MINUTE=5
|
|
RESET_RATE_LIMIT_PER_MINUTE=5
|
|
REFRESH_RATE_LIMIT_PER_MINUTE=30
|
|
MESSAGE_RATE_LIMIT_PER_MINUTE=30
|
|
DUPLICATE_MESSAGE_COOLDOWN_SECONDS=10
|
|
CELERY_TASK_ALWAYS_EAGER=false
|