Rafael Lopes
59db214ed9
Some checks are pending
Deploy Dev / deploy (push) Waiting to run
- Adicionado JwtAuthGuard global para validar tokens nas rotas privadas - Adicionados decorators Public e Roles para separar rotas públicas e permissões - Adicionado RolesGuard para proteger rotas administrativas por perfil - Rotas privadas passam a exigir Authorization Bearer Token - WebSocket do WhatsApp passa a exigir JWT no handshake - Adicionado rate limit global com @nestjs/throttler - Adicionado LoginDto e ValidationPipe para validar payload de login - Extraído SQL de acesso do usuário para UserAccessRepository - Melhorados logs de login LDAP/Microsoft sem expor dados sensíveis
42 lines
1.0 KiB
Plaintext
42 lines
1.0 KiB
Plaintext
# Backend environment variables
|
|
|
|
NODE_ENV=development
|
|
PORT=3001
|
|
|
|
# Database
|
|
DB_HOST=postgres
|
|
DB_PORT=5432
|
|
DB_USER=omnichannel
|
|
DB_PASSWORD=change-me
|
|
DB_NAME=omnichannel
|
|
|
|
# HTTP/JWT
|
|
FRONTEND_URL=http://localhost:3000
|
|
JWT_SECRET=change-this-long-random-secret
|
|
JWT_EXPIRES_IN=8h
|
|
|
|
# Rate limit
|
|
RATE_LIMIT_TTL_MS=60000
|
|
RATE_LIMIT_MAX=300
|
|
|
|
# Auth providers: ldap,microsoft or only one of them
|
|
AUTH_PROVIDERS=ldap,microsoft
|
|
|
|
# LDAP / Active Directory
|
|
LDAP_ENABLED=true
|
|
LDAP_URL=ldaps://kratos.sothistelecom.com:636
|
|
LDAP_DOMAIN=sothis.com.br
|
|
LDAP_USER_DN_TEMPLATE={{username}}@sothis.com.br
|
|
LDAP_SEARCH_BASE=DC=sothistelecom,DC=com
|
|
LDAP_SEARCH_FILTER=(&(objectClass=user)(sAMAccountName={{username}}))
|
|
# LDAP_BIND_DN=CN=ldap-reader,OU=Users,DC=example,DC=com
|
|
# LDAP_BIND_PASSWORD=change-me
|
|
|
|
# Microsoft Entra ID OAuth
|
|
MICROSOFT_ENABLED=false
|
|
MICROSOFT_TENANT_ID=common
|
|
MICROSOFT_CLIENT_ID=
|
|
MICROSOFT_CLIENT_SECRET=
|
|
MICROSOFT_REDIRECT_URI=http://localhost:3001/auth/oauth/microsoft/callback
|
|
MICROSOFT_SUCCESS_REDIRECT_URL=http://localhost:3000/login
|