B2BCall Bootstrap
a2898fa566
- packages/database: schema Prisma (users/sessions/roles/permissions/
user_roles/role_permissions/audit_logs/password_reset_tokens), migration
inicial e seed (permissoes+perfis+bootstrap super_admin com senha
aleatoria em FIRST_LOGIN.txt). Decisao de ORM (Prisma) documentada em
docs/ARCHITECTURE.md
- packages/shared: catalogo de permissoes (fonte unica usada por seed e API)
- apps/api: NestJS 11 + Fastify
- autenticacao: Argon2id, access JWT + refresh token opaco com rotacao,
cookies HttpOnly/SameSite=Lax, change/forgot/reset password
- rate limiting progressivo de login via Redis (bloqueio crescente por IP)
- RBAC reforcado no backend (PermissionsGuard), protecao contra
auto-elevacao de privilegio
- auditoria (audit_logs) nas acoes sensiveis, com redacao de segredos
- health checks reais (postgres+redis), swagger desabilitavel, logs
estruturados JSON com request_id de correlacao, filtro global de
excecoes sem vazar erro cru
- infrastructure/docker/api.Dockerfile: build multi-stage do monorepo pnpm
- docker-compose.yml: servico api na rede interna, sem porta publicada
Testado via containers reais: login, /me, refresh, change-password,
rate limit (7 tentativas -> 429), RBAC (nega/permite), bloqueio de
auto-elevacao (403), audit log populado, health checks, lint e testes
unitarios passando.
25 lines
583 B
JSON
25 lines
583 B
JSON
{
|
|
"name": "@b2bcall/database",
|
|
"version": "0.1.0",
|
|
"private": true,
|
|
"main": "dist/index.js",
|
|
"types": "dist/index.d.ts",
|
|
"scripts": {
|
|
"build": "prisma generate && tsc",
|
|
"prisma:generate": "prisma generate",
|
|
"prisma:migrate": "prisma migrate deploy",
|
|
"prisma:migrate:dev": "prisma migrate dev",
|
|
"seed": "ts-node prisma/seed.ts"
|
|
},
|
|
"dependencies": {
|
|
"@prisma/client": "^6.16.3",
|
|
"argon2": "^0.44.0"
|
|
},
|
|
"devDependencies": {
|
|
"@types/node": "^24.0.0",
|
|
"prisma": "^6.16.3",
|
|
"ts-node": "^10.9.2",
|
|
"typescript": "^5.7.3"
|
|
}
|
|
}
|