fix(backend): add Zod validation, helmet, and rate limiting across all routes#47

Open

stephanieoghenemega-eng wants to merge 20 commits into

Secureflow-protocol:mainfrom

stephanieoghenemega-eng:fix/backend-validation-ratelimit-helmet

Commits on Jun 18, 2026

chore(backend): install helmet, express-rate-limit, zod, vitest, supertest
stephanieoghenemega-eng
committed
feat(backend): add helmet security-headers middleware
stephanieoghenemega-eng
committed
feat(backend): add global rate limiter — 100 req / 15 min per IP
stephanieoghenemega-eng
committed
feat(backend): add validateBody/validateQuery Zod middleware helpers
stephanieoghenemega-eng
committed
feat(backend): add shared internalError/serviceUnavailable response helpers
stephanieoghenemega-eng
committed
feat(backend/schemas): add Zod schemas for all notifications routes
stephanieoghenemega-eng
committed
feat(backend/notifications): apply Zod validation to GET /notifications
stephanieoghenemega-eng
committed
feat(backend/schemas): add Zod schemas for all messages routes
stephanieoghenemega-eng
committed
feat(backend/messages): replace manual checks with Zod validation on POST /
stephanieoghenemega-eng
committed
feat(backend/messages): apply Zod validation to GET /conversation
stephanieoghenemega-eng
committed
feat(backend/messages): apply Zod validation to GET /inbox
stephanieoghenemega-eng
committed
feat(backend/messages): apply Zod validation to GET /unread-count
stephanieoghenemega-eng
committed
feat(backend/messages): apply Zod validation to PATCH /conversation/read
stephanieoghenemega-eng
committed
feat(backend/messages): apply Zod validation to PATCH /:id/read; sanitize Supabase errors
stephanieoghenemega-eng
committed
feat(backend/schemas): add Zod schemas for all AI route bodies
stephanieoghenemega-eng
committed
feat(backend/ai): apply Zod validation to POST /milestones
stephanieoghenemega-eng
committed
feat(backend/ai): apply Zod validation to POST /cover-letter
stephanieoghenemega-eng
committed
feat(backend/ai): apply Zod validation to POST /rewrite; sanitize Groq errors from 500 responses
stephanieoghenemega-eng
committed
feat(backend): add Zod schemas and validation for gasless and upload routes; sanitize errors
stephanieoghenemega-eng
committed
test(backend): add vitest validation tests for all route schemas
stephanieoghenemega-eng
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(backend): add Zod validation, helmet, and rate limiting across all routes#47

fix(backend): add Zod validation, helmet, and rate limiting across all routes#47
stephanieoghenemega-eng wants to merge 20 commits into
Secureflow-protocol:mainfrom
stephanieoghenemega-eng:fix/backend-validation-ratelimit-helmet

Commits on Jun 18, 2026

chore(backend): install helmet, express-rate-limit, zod, vitest, supertest

feat(backend): add helmet security-headers middleware

feat(backend): add global rate limiter — 100 req / 15 min per IP

feat(backend): add validateBody/validateQuery Zod middleware helpers

feat(backend): add shared internalError/serviceUnavailable response helpers

feat(backend/schemas): add Zod schemas for all notifications routes

feat(backend/notifications): apply Zod validation to GET /notifications

feat(backend/schemas): add Zod schemas for all messages routes

feat(backend/messages): replace manual checks with Zod validation on POST /

feat(backend/messages): apply Zod validation to GET /conversation

feat(backend/messages): apply Zod validation to GET /inbox

feat(backend/messages): apply Zod validation to GET /unread-count

feat(backend/messages): apply Zod validation to PATCH /conversation/read

feat(backend/messages): apply Zod validation to PATCH /:id/read; sanitize Supabase errors

feat(backend/schemas): add Zod schemas for all AI route bodies

feat(backend/ai): apply Zod validation to POST /milestones

feat(backend/ai): apply Zod validation to POST /cover-letter

feat(backend/ai): apply Zod validation to POST /rewrite; sanitize Groq errors from 500 responses

feat(backend): add Zod schemas and validation for gasless and upload routes; sanitize errors

test(backend): add vitest validation tests for all route schemas