- session: set_tenant use bound param (SQL injection fix)
- health: text('SELECT 1'), REDIS_URL from config
- deps: re-export get_db from session, use settings.ENABLE_DEV_AUTH (default False)
- routes: all get_db from app.api.deps; conftest overrides deps.get_db
- main: register exception handlers from app.api.exceptions
- next.config: enable ESLint and TypeScript checks
- .eslintrc: drop @typescript-eslint/recommended; fix no-console (logger, ws-client, regulations)
- backend/.env.example added
- frontend: export apiFetch; dashboard, profile, settings, risks use api-client
- docs/ANALYSIS_AND_RECOMMENDATIONS.md
Co-authored-by: Cursor <cursoragent@cursor.com>
30 lines
758 B
JavaScript
30 lines
758 B
JavaScript
/** @type {import('next').NextConfig} */
|
|
const nextConfig = {
|
|
eslint: { ignoreDuringBuilds: false },
|
|
typescript: { ignoreBuildErrors: false },
|
|
async rewrites() {
|
|
// In development, proxy /api/v1/* to FastAPI backend
|
|
const backendUrl = process.env.BACKEND_URL || 'http://localhost:8000';
|
|
return [
|
|
{
|
|
source: '/api/v1/:path*',
|
|
destination: `${backendUrl}/api/v1/:path*`,
|
|
},
|
|
];
|
|
},
|
|
async headers() {
|
|
return [
|
|
{
|
|
source: '/(.*)',
|
|
headers: [
|
|
{ key: 'X-Frame-Options', value: 'DENY' },
|
|
{ key: 'X-Content-Type-Options', value: 'nosniff' },
|
|
{ key: 'X-XSS-Protection', value: '1; mode=block' },
|
|
],
|
|
},
|
|
];
|
|
},
|
|
};
|
|
|
|
module.exports = nextConfig;
|