Skip to content

Add security headers, view dedup, audit trail, and RBAC logging (#889, #888, #887, #886, #890) - #980

Merged
nanaf6203-bit merged 5 commits into
MettaChain:mainfrom
limxiy:fix/security-headers-view-dedup-audit-rbac
Jul 28, 2026
Merged

Add security headers, view dedup, audit trail, and RBAC logging (#889, #888, #887, #886, #890)#980
nanaf6203-bit merged 5 commits into
MettaChain:mainfrom
limxiy:fix/security-headers-view-dedup-audit-rbac

Conversation

@limxiy

@limxiy limxiy commented Jul 26, 2026

Copy link
Copy Markdown
Contributor

Changes

Implement API response compression with security headers (Closes #889)

  • Add security headers middleware: X-Content-Type-Options, X-Frame-Options, HSTS, Referrer-Policy, Permissions-Policy

Add property view deduplication (Closes #888)

  • Bot user-agent detection and exclusion
  • Same IP filtered within 30-minute window
  • Same user filtered within 24-hour window

Add admin audit trail (Closes #887)

  • Log all admin actions with full context to activity_logs

Implement RBAC audit logging (#886)

  • Track all role assignments, escalations, and permission changes
  • Immutable audit entries with actor, target, old/new role, reason, IP, timestamp

Remove @ts-nocheck from source files (Closes #890)

  • Removed from 11 key source files across auth, blockchain, admin, search, and transactions modules

…d RBAC logging

- Add security headers middleware (MettaChain#889): X-Content-Type-Options, X-Frame-Options, HSTS, Referrer-Policy, Permissions-Policy
- Add property view deduplication (MettaChain#888): Bot detection, IP-based 30min window, user-based 24h window
- Add admin audit trail (MettaChain#887): Log all admin actions with full context
- Implement RBAC audit logging (MettaChain#886): Track role assignments, escalations, and permission changes
- Remove @ts-nocheck from key source files (MettaChain#890): main.ts, auth, blockchain, admin, search, transactions modules
@drips-wave

drips-wave Bot commented Jul 26, 2026

Copy link
Copy Markdown

@limxiy Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

@nanaf6203-bit nanaf6203-bit left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@nanaf6203-bit
nanaf6203-bit merged commit c5c36cc into MettaChain:main Jul 28, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

2 participants