8 Commits

Include renames

Author	SHA1	Message	Date
bermudalambandClaude Opus 5	977489cbc0	refactor: delete superseded checkout routes and dedupe cart checkout ... routes/paypal.ts and routes/demo.ts were the pre-cart single-item checkout flow. Nothing has imported them since the cart flow landed: app.ts mounts only cartCheckout, the frontend calls /api/checkout/cart/*, and no test touches them. They duplicated PAYPAL_BASE, getAccessToken, and a second handler for the /webhooks/paypal mount. Also extract openCheckout() from /paypal/create and /demo/purchase in cartCheckout.ts, which repeated the same address-ownership check, cart lock, and checkouts/checkout_items inserts. It returns a discriminated union so callers keep control of the transaction and the response. Add CartItem/LockedCart interfaces, dropping the (it: any) casts. Note: paypal.ts was the only writer of items.reserved_until and items.paypal_order_id. Those columns are now write-dead; the schema is left alone for a separate migration. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-08-14 17:59:42 -05:00
bermudalambandClaude Opus 5	ab1024a1b6	fix: resolve SonarQube hotspots for upload size and X-Powered-By ... - S5693: MAX_IMAGE_BYTES was 8 * 1024 * 1024 (8,388,608), just over the 8,000,000-byte ceiling the rule treats as safe, so the hotspot on the multer storage config never cleared. Use 8_000_000. - S5689: Express advertises its stack in X-Powered-By by default, which tells an attacker what to aim exploits at. Disable the header. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-08-14 17:18:42 -05:00
bermudalamb	b73b472d80	fix: TypeScript type mismatch between UspsValidationResult and local fallback object	2026-08-14 14:47:52 -05:00
bermudalamb	9ab689e624	feat: add customer cart with expiry, shipping addresses with USPS validation, and multi-item PayPal checkout	2026-08-14 14:02:25 -05:00
bermudalambandClaude Opus 5	aba47c81e3	fix: bound admin image uploads and use a CSPRNG for stored filenames ... SonarQube flagged three hotspots in the admin router: multer was configured with no content length limits, and stored filenames were derived from Date.now() plus Math.random(). - Cap the multipart body on every dimension: 6 files, 8 MiB per image, 8 fields, 64 KiB per field. Without limits a single request could fill the uploads volume. - Generate stored filenames with crypto.randomUUID() so paths are not predictable. Image ordering is unaffected; sort_order already drives it. - Wrap the upload middleware to translate MulterError into 413/400 JSON. The app mounts no error handler, so a limit rejection would otherwise surface as an HTML 500. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-08-14 09:22:45 -05:00
bermudalamb	81118245ce	fix: sonarqube denial of service issue	2026-08-14 08:43:37 -05:00
bermudalamb	921022c658	Add backend unit/integration tests, Playwright e2e tests, README, cookie Secure fix	2026-08-13 22:35:38 +00:00
bermudalamb	9be4986dd3	Initial commit: redefined-designs storefront	2026-08-13 21:07:54 +00:00