olsch01 208c1dd7bc security: address assessment findings and bump to v2026.3.11 ...

- C1: Disable Swagger UI in production (env gate)
- M1+M2: Add Helmet.js for security headers (CSP, X-Frame-Options,
  X-Content-Type-Options, Referrer-Policy) and remove X-Powered-By
- H2: Add @nestjs/throttler rate limiting (5 req/min on login/register)
- M4: Remove orgSchema from JWT payload and client-side storage;
  tenant middleware now resolves schema from orgId via cached DB lookup
- L1: Fix Chatwoot user identification (read from auth store on ready)
- Remove schemaName from frontend Organization type and UI displays

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-11 15:32:51 -04:00

backend

security: address assessment findings and bump to v2026.3.11

2026-03-11 15:32:51 -04:00

db

fix: resolve 5 invoice/payment issues from user feedback

2026-03-07 12:01:57 -05:00

docs

fix: improve AI health score accuracy and consistency

2026-03-06 12:44:12 -05:00

frontend

security: address assessment findings and bump to v2026.3.11

2026-03-11 15:32:51 -04:00

nginx

feat: async AI calls, 10-min timeout, and failure messaging

2026-03-06 14:42:53 -05:00

scripts

feat: add password reset utility script

2026-03-07 12:19:22 -05:00

.env.example

feat: add New Relic APM instrumentation to backend

2026-03-03 09:31:56 -05:00

.gitignore

Add database backup/restore script with auto-pruning

2026-03-02 14:40:51 -05:00

docker-compose.prod.yml

perf: remove unnecessary postgres/redis host port mappings in production

2026-03-03 14:52:09 -05:00

docker-compose.ssl.yml

Add SSL/TLS support with Certbot and update deployment guide

2026-03-02 14:28:01 -05:00

docker-compose.yml

feat: add New Relic APM instrumentation to backend

2026-03-03 09:31:56 -05:00

HOA_Financial_Platform_Part1_Market_Analysis.md

Initial commit: HOA Financial Intelligence Platform MVP

2026-02-17 19:58:04 -05:00

HOA_Financial_Platform_Part2_Competitive_Analysis.md

Initial commit: HOA Financial Intelligence Platform MVP

2026-02-17 19:58:04 -05:00

HOA_Financial_Platform_Part3_MVP_Features.md

Initial commit: HOA Financial Intelligence Platform MVP

2026-02-17 19:58:04 -05:00

HOA_Financial_Platform_Part4_Technical_Architecture.md

Initial commit: HOA Financial Intelligence Platform MVP

2026-02-17 19:58:04 -05:00

PLAN.md

fix: improve AI health score accuracy and consistency

2026-03-06 12:44:12 -05:00

Description

HOA Financial Intelligence Platform - Multi-tenant financial management for homeowner associations

2.3 MiB

Languages

TypeScript 97.6%

Shell 1.8%

PLpgSQL 0.2%

Dockerfile 0.2%

HTML 0.1%