search

visheshrwl / Uber-like

This repository contains the codebase for an Uber-like application providing both delivery and cab services. The project uses modern technologies including Docker, Kubernetes, TypeScript for backend, React for frontend, GraphQL for API interactions, Redis for caching, Kafka for message brokering, and advanced routing algorithms.
MIT License
11 stars 28 forks source link

Improve security of the backend #27

Open Joshna907 opened 1 month ago

Joshna907 commented 1 month ago

Input Validation & Sanitization: Ensure all user inputs are validated and sanitized to prevent attacks like SQL injection and XSS.

Secure Environment Variables: Move sensitive information (API keys, database credentials) to environment variables and add a .env.example file.

Add Secure Headers: Implement secure headers (using helmet) to prevent clickjacking, XSS, and content sniffing.

JWT Security: Ensure JWT tokens use secure algorithms (e.g., RS256), set expiration, and add refresh tokens.

gaurkrutika commented 1 month ago

Can you assign this to me? @visheshrwl

anishka25 commented 1 month ago

Can you please assign this issue to me ? I have experience in doing the same

visheshrwl commented 2 weeks ago

Hey @Joshna907 , @gaurkrutika , @anishka25 ! 👋

First off, I want to extend a huge thank you to all of you for your amazing contributions to this project! Your support and hard work mean a lot, and I truly appreciate everything you do. 🙏

I have a small favor to ask: if you think I’ve been helpful and supportive throughout your contributions, I would be honored if you could nominate me by filling out this form: Nominate me.

Your nomination would mean the world to me, and it’s a great way to help me continue supporting our awesome community. Thanks again for all the amazing work, and let's keep making great things happen! 🚀

Best, Vishesh