9b220523ff
## Critical Issues (CRIT-001~003) - All Fixed
- JWT secret key validation with pydantic field_validator
- Login audit logging for success/failure attempts
- Frontend API path prefix removal
## High Priority Issues (HIGH-001~008) - All Fixed
- Project soft delete using is_active flag
- Redis session token bytes handling
- Rate limiting with slowapi (5 req/min for login)
- Attachment API permission checks
- Kanban view with drag-and-drop
- Workload heatmap UI (WorkloadPage, WorkloadHeatmap)
- TaskDetailModal integrating Comments/Attachments
- UserSelect component for task assignment
## Medium Priority Issues (MED-001~012) - All Fixed
- MED-001~005: DB commits, N+1 queries, datetime, error format, blocker flag
- MED-006: Project health dashboard (HealthService, ProjectHealthPage)
- MED-007: Capacity update API (PUT /api/users/{id}/capacity)
- MED-008: Schedule triggers (cron parsing, deadline reminders)
- MED-009: Watermark feature (image/PDF watermarking)
- MED-010~012: useEffect deps, DOM operations, PDF export
## New Files
- backend/app/api/health/ - Project health API
- backend/app/services/health_service.py
- backend/app/services/trigger_scheduler.py
- backend/app/services/watermark_service.py
- backend/app/core/rate_limiter.py
- frontend/src/pages/ProjectHealthPage.tsx
- frontend/src/components/ProjectHealthCard.tsx
- frontend/src/components/KanbanBoard.tsx
- frontend/src/components/WorkloadHeatmap.tsx
## Tests
- 113 new tests passing (health: 32, users: 14, triggers: 35, watermark: 32)
## OpenSpec Archives
- add-project-health-dashboard
- add-capacity-update-api
- add-schedule-triggers
- add-watermark-feature
- add-rate-limiting
- enhance-frontend-ux
- add-resource-management-ui
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
95 lines
2.7 KiB
Python
95 lines
2.7 KiB
Python
from pydantic_settings import BaseSettings
|
|
from pydantic import field_validator
|
|
from typing import List
|
|
import os
|
|
|
|
|
|
class Settings(BaseSettings):
|
|
# Database
|
|
MYSQL_HOST: str = "localhost"
|
|
MYSQL_PORT: int = 3306
|
|
MYSQL_USER: str = "root"
|
|
MYSQL_PASSWORD: str = ""
|
|
MYSQL_DATABASE: str = "pjctrl"
|
|
|
|
@property
|
|
def DATABASE_URL(self) -> str:
|
|
return f"mysql+pymysql://{self.MYSQL_USER}:{self.MYSQL_PASSWORD}@{self.MYSQL_HOST}:{self.MYSQL_PORT}/{self.MYSQL_DATABASE}"
|
|
|
|
# Redis
|
|
REDIS_HOST: str = "localhost"
|
|
REDIS_PORT: int = 6379
|
|
REDIS_DB: int = 0
|
|
|
|
@property
|
|
def REDIS_URL(self) -> str:
|
|
return f"redis://{self.REDIS_HOST}:{self.REDIS_PORT}/{self.REDIS_DB}"
|
|
|
|
# JWT - Must be set in environment, no default allowed
|
|
JWT_SECRET_KEY: str = ""
|
|
JWT_ALGORITHM: str = "HS256"
|
|
JWT_EXPIRE_MINUTES: int = 10080 # 7 days
|
|
|
|
@field_validator("JWT_SECRET_KEY")
|
|
@classmethod
|
|
def validate_jwt_secret_key(cls, v: str) -> str:
|
|
"""Validate that JWT_SECRET_KEY is set and not a placeholder."""
|
|
if not v or v.strip() == "":
|
|
raise ValueError(
|
|
"JWT_SECRET_KEY must be set in environment variables. "
|
|
"Please configure it in the .env file."
|
|
)
|
|
placeholder_values = [
|
|
"your-secret-key-change-in-production",
|
|
"change-me",
|
|
"secret",
|
|
"your-secret-key",
|
|
]
|
|
if v.lower() in placeholder_values:
|
|
raise ValueError(
|
|
"JWT_SECRET_KEY appears to be a placeholder value. "
|
|
"Please set a secure secret key in the .env file."
|
|
)
|
|
return v
|
|
|
|
# External Auth API
|
|
AUTH_API_URL: str = "https://pj-auth-api.vercel.app"
|
|
|
|
# CORS
|
|
CORS_ORIGINS: List[str] = ["http://localhost:3000", "http://localhost:5173"]
|
|
|
|
# System Admin
|
|
SYSTEM_ADMIN_EMAIL: str = "ymirliu@panjit.com.tw"
|
|
|
|
# File Upload
|
|
UPLOAD_DIR: str = "./uploads"
|
|
MAX_FILE_SIZE_MB: int = 50
|
|
|
|
@property
|
|
def MAX_FILE_SIZE(self) -> int:
|
|
return self.MAX_FILE_SIZE_MB * 1024 * 1024
|
|
|
|
# Allowed file extensions (whitelist)
|
|
ALLOWED_EXTENSIONS: List[str] = [
|
|
# Documents
|
|
"pdf", "doc", "docx", "xls", "xlsx", "ppt", "pptx", "txt", "csv",
|
|
# Images
|
|
"jpg", "jpeg", "png", "gif", "bmp", "svg", "webp",
|
|
# Archives
|
|
"zip", "rar", "7z", "tar", "gz",
|
|
# Data
|
|
"json", "xml", "yaml", "yml",
|
|
]
|
|
|
|
# Blocked file extensions (dangerous)
|
|
BLOCKED_EXTENSIONS: List[str] = [
|
|
"exe", "bat", "cmd", "sh", "ps1", "dll", "msi", "com", "scr", "vbs", "js"
|
|
]
|
|
|
|
class Config:
|
|
env_file = ".env"
|
|
case_sensitive = True
|
|
|
|
|
|
settings = Settings()
|