81c6bccf8a
- express-rate-limit: 100/15min global, 5/15min on auth.login + auth.register, 3/hour reserved for password-reset endpoints; trust proxy enabled. - helmet: enabled with contentSecurityPolicy + crossOriginEmbedderPolicy off to keep Vite dev and the SPA bundle working. - CORS: explicit allowlist (https://attente.cosmolan.fr in prod, localhost in dev), credentials true, restricted methods/headers; same allowlist applied to socket.io. - JWT_SECRET: must be set and >= 32 chars; assertAuthEnv() called from the server bootstrap so the process refuses to start without one. The insecure "changeme-in-production" fallback in docker-compose.yml is removed. - qm_auth cookie: maxAge reduced from 30d to 7d, JWT expiry matches. - WhatsApp sessions: path now driven by WHATSAPP_SESSION_DIR and defaults to /app/data/whatsapp-sessions; docker-compose.yml mounts a named app_data volume so credentials survive container restarts. - scripts/backup-db.sh: timestamped, gzipped mysqldump into /app/data/backups with rotation (keeps last 7); Dockerfile installs mysql-client and bundles the script. - .env.example refreshed with documented placeholders for every required var (DATABASE_URL, JWT_SECRET, WHATSAPP_SESSION_DIR, MYSQL_*, BACKUP_*). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
94 lines
2.8 KiB
JSON
94 lines
2.8 KiB
JSON
{
|
|
"name": "queue-med",
|
|
"version": "1.0.0",
|
|
"private": true,
|
|
"type": "module",
|
|
"description": "QueueMed — virtual waiting room for medical practices",
|
|
"scripts": {
|
|
"dev": "concurrently -k -n server,client -c blue,green \"pnpm:dev:server\" \"pnpm:dev:client\"",
|
|
"dev:server": "tsx watch --env-file=.env server/_core/index.ts",
|
|
"dev:client": "vite",
|
|
"build": "vite build",
|
|
"start": "NODE_ENV=production tsx server/_core/index.ts",
|
|
"db:push": "drizzle-kit push",
|
|
"db:generate": "drizzle-kit generate",
|
|
"test": "vitest run",
|
|
"typecheck": "tsc --noEmit"
|
|
},
|
|
"dependencies": {
|
|
"@hapi/boom": "^10.0.1",
|
|
"@radix-ui/react-checkbox": "^1.1.3",
|
|
"@radix-ui/react-dialog": "^1.1.4",
|
|
"@radix-ui/react-dropdown-menu": "^2.1.4",
|
|
"@radix-ui/react-label": "^2.1.1",
|
|
"@radix-ui/react-popover": "^1.1.4",
|
|
"@radix-ui/react-progress": "^1.1.1",
|
|
"@radix-ui/react-radio-group": "^1.2.2",
|
|
"@radix-ui/react-select": "^2.1.4",
|
|
"@radix-ui/react-separator": "^1.1.1",
|
|
"@radix-ui/react-slot": "^1.1.1",
|
|
"@radix-ui/react-switch": "^1.1.2",
|
|
"@radix-ui/react-tabs": "^1.1.2",
|
|
"@radix-ui/react-toast": "^1.2.4",
|
|
"@radix-ui/react-tooltip": "^1.1.6",
|
|
"@tailwindcss/vite": "^4.0.0",
|
|
"@tanstack/react-query": "^5.62.7",
|
|
"@trpc/client": "11.0.0-rc.660",
|
|
"@trpc/react-query": "11.0.0-rc.660",
|
|
"@trpc/server": "11.0.0-rc.660",
|
|
"@whiskeysockets/baileys": "7.0.0-rc.9",
|
|
"bcryptjs": "^2.4.3",
|
|
"class-variance-authority": "^0.7.1",
|
|
"clsx": "^2.1.1",
|
|
"cmdk": "^1.0.0",
|
|
"cookie-parser": "^1.4.7",
|
|
"cors": "^2.8.5",
|
|
"date-fns": "^4.1.0",
|
|
"drizzle-orm": "^0.38.2",
|
|
"express": "^4.21.2",
|
|
"express-rate-limit": "^8.4.1",
|
|
"framer-motion": "^11.15.0",
|
|
"helmet": "^8.1.0",
|
|
"input-otp": "^1.4.1",
|
|
"jsonwebtoken": "^9.0.2",
|
|
"lucide-react": "^0.468.0",
|
|
"mysql2": "^3.11.5",
|
|
"nanoid": "^5.0.9",
|
|
"p-queue": "^9.1.0",
|
|
"pino": "^10.3.1",
|
|
"qrcode": "^1.5.4",
|
|
"qrcode-terminal": "^0.12.0",
|
|
"react": "^19.0.0",
|
|
"react-dom": "^19.0.0",
|
|
"recharts": "^2.15.0",
|
|
"socket.io": "^4.8.1",
|
|
"socket.io-client": "^4.8.1",
|
|
"sonner": "^1.7.1",
|
|
"tailwind-merge": "^2.6.0",
|
|
"tailwindcss": "^4.0.0",
|
|
"wouter": "^3.3.5",
|
|
"zod": "^3.24.1"
|
|
},
|
|
"devDependencies": {
|
|
"@types/bcryptjs": "^2.4.6",
|
|
"@types/cookie-parser": "^1.4.8",
|
|
"@types/cors": "^2.8.17",
|
|
"@types/express": "^4.17.21",
|
|
"@types/jsonwebtoken": "^9.0.7",
|
|
"@types/node": "^22.10.2",
|
|
"@types/qrcode": "^1.5.5",
|
|
"@types/react": "^19.0.2",
|
|
"@types/react-dom": "^19.0.2",
|
|
"@vitejs/plugin-react": "^4.3.4",
|
|
"concurrently": "^9.1.1",
|
|
"drizzle-kit": "^0.30.1",
|
|
"tsx": "^4.19.2",
|
|
"typescript": "^5.7.2",
|
|
"vite": "^6.0.0",
|
|
"vitest": "^2.1.8"
|
|
},
|
|
"engines": {
|
|
"node": ">=20"
|
|
},
|
|
"packageManager": "pnpm@9.15.0"
|
|
}
|