Commit Graph

102 Commits

Author SHA1 Message Date
Alex Holliday
0030394008 add migrations table 2025-09-23 11:34:25 -07:00
Alex Holliday
11ff99613a implement auth routes, add user migration 2025-09-22 15:56:41 -07:00
Alex Holliday
23126a92cd move v1 controllers to v1 dir 2025-09-22 13:04:45 -07:00
Alex Holliday
d8ed9abebf add gitignore 2025-09-22 12:53:44 -07:00
Franco Carrara
4039517683 Add response messages to string service 2025-09-17 23:33:45 -03:00
Franco Carrara
00fc7b8038 Allow jsonPath to be used along expectedValue and validate the response. 2025-09-17 23:23:16 -03:00
karenvicent
bf53f107e3 Merge branch 'develop' into fix-skip-maintenance-notifications 2025-09-15 12:29:47 -04:00
karenvicent
00de974528 Fix: Skip notifications for monitors during active maintenance windows 2025-09-15 12:28:37 -04:00
karenvicent
272e2ba955 add monitor name and url to infrastructure alert 2025-09-15 08:34:51 -04:00
karenvicent
041a261540 add llama sugestions 2025-09-12 10:13:38 -04:00
karenvicent
fb84a79a04 Add Discord embed message formatting for notifications 2025-09-11 16:29:08 -04:00
Alex Holliday
4e78de9da2 throw error if present 2025-09-08 06:42:36 -07:00
antonstrover
e598ae45f7 Merge branch 'develop' into fix/uptime%-charts-toggles 2025-09-05 16:46:04 +01:00
Alex Holliday
f8a0741e6c <= -> < 2025-08-30 16:19:17 -07:00
Alex Holliday
652d231771 add migration for statusWindowThreshold 2025-08-30 16:07:03 -07:00
Alex Holliday
e7006a4a44 fix default value 2025-08-30 11:28:54 -07:00
Alex Holliday
46b342005a update monitor interval and data 2025-08-30 11:11:58 -07:00
Alex Holliday
44ba6b4d0f early returns 2025-08-29 09:22:02 -07:00
anton.strover
27d613b594 remove carried away-ness 2025-08-29 10:49:22 +01:00
gorkem-bwl
c445463c0c refactor: improve Docker container matching with deterministic priority-based logic
Address code review feedback to eliminate ambiguity issues and improve reliability:

**Backend Improvements:**
- Implement priority-based matching: exact ID → exact name → partial ID
- Add input normalization (strip leading slashes, case-insensitive)
- Add ambiguity detection with warning logs for debugging
- Maintain full backwards compatibility with existing monitors

**Frontend Improvements:**
- Update validation regex to support leading slashes (/container-name)
- Improve error message clarity for user guidance

**Resolves Ambiguity Issues:**
- Container name "abc" vs Container ID "abc123..." now deterministic
- Multiple containers with similar names handled predictably
- Case-insensitive matching for better user experience

**Priority Order:**
1. Exact full ID match (64-char) - highest priority
2. Exact container name match - case-insensitive
3. Partial ID match - backwards compatibility fallback

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-08-29 00:53:40 -04:00
gorkem-bwl
4693177e4b feat: add Docker container monitoring by name
- Update Docker monitoring to support both container names and IDs
- Maintain backward compatibility with existing container ID monitoring
- Add logic to find containers by name (with or without "/" prefix)
- Update frontend UI labels and placeholders to reflect name/ID support
- Update instructions to clarify both name and ID are supported

Resolves user request: "It would be great if we could monitor docker containers by name and not just ID - given that the ID changes when containers are taken down for any reason"

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-08-29 00:27:01 -04:00
gorkem-bwl
d3d20b29c3 Fix status page deletion error - missing module reference
- Fix deleteStatusPage method call to use statusPageModule
- Change this.db.deleteStatusPage to this.db.statusPageModule.deleteStatusPage
- Ensures consistency with other controller methods
- Resolves "this.db.deleteStatusPage is not a function" error

Fixes bug where status page deletion failed due to incorrect database module reference.
2025-08-27 17:47:11 -04:00
Alex Holliday
2318082bb8 fix advanced matching 2025-08-26 14:54:24 -07:00
Alex Holliday
7a929777b4 fix model types 2025-08-25 15:03:31 -07:00
Alex Holliday
637bc84136 fix string service path 2025-08-25 14:30:41 -07:00
Alex Holliday
dabff74946 fix notification validation 2025-08-22 11:33:14 -07:00
Alex Holliday
87bec0399f remove console statement 2025-08-20 14:01:32 -07:00
Alex Holliday
27415aeca6 fix undefined bug, updated server validation 2025-08-18 15:34:15 -07:00
Alexander Holliday
9bd2e336a6 Merge pull request #2811 from bluewave-labs/feat/alerts-n-of-m
feat: alerts on  `n` of `m`, resolves #2366
2025-08-18 14:16:35 -07:00
Alex Holliday
d5778ec173 update stauts service to use n of m status changes 2025-08-18 13:40:56 -07:00
Alex Holliday
74e80f086a udpate monitor model 2025-08-18 13:40:22 -07:00
Alex Holliday
1788cda5c2 let -> const 2025-08-18 11:27:41 -07:00
Alex Holliday
155adf549e add backend changes 2025-08-18 10:55:12 -07:00
Alex Holliday
9f9a2be1d8 fix missing URL 2025-08-17 15:08:12 -07:00
Alex Holliday
45ac589975 refactor network service 2025-08-15 16:04:43 -07:00
Alex Holliday
9925e10ffc add timings to model 2025-08-15 16:03:12 -07:00
Alexander Holliday
cd203ff067 Merge pull request #2794 from Owaiseimdad/Network-patch-fixes-part-1
Fixed the selector and also null points for networks
2025-08-15 13:12:04 -07:00
Alex Holliday
b8aa1ef765 fix path, remove redis form build script 2025-08-15 09:17:33 -07:00
Owaise
88c478c533 Formatting is done. 2025-08-15 11:37:38 +05:30
Owaise
1ecec115e4 Fixed the selector and also null points for networks. 2025-08-15 11:28:22 +05:30
Alexander Holliday
e32e72de7a Merge pull request #2741 from Owaiseimdad/Network-tab-implementation-FE
Network tab implementation fe
2025-08-14 09:22:09 -07:00
Owaise
2141c3eacd Metrics validated. 2025-08-14 00:04:53 +05:30
Owaise
e27cc8a12b Added delta instead of avg, and formatted the code to re-use already existing code. 2025-08-12 23:48:47 +05:30
Owaise
355a445ead Fixed the code for linus, windows and mac based. Also made changes to pipeline. 2025-08-12 10:05:58 +05:30
Alexander Holliday
38b2025286 Merge branch 'develop' into security/add-jwt-cookie-infrastructure 2025-08-11 15:08:54 -07:00
Alex Holliday
0bc8142e71 move to middleware 2025-08-11 15:02:07 -07:00
Alexander Holliday
d890b972be Merge pull request #2762 from bluewave-labs/security/apply-input-sanitization
Apply Input Sanitization for XSS Protection
2025-08-11 14:53:32 -07:00
gorkem-bwl
05945a9a74 feat: add JWT cookie infrastructure
Adds the foundation for secure cookie-based authentication without changing
the authentication flow. This prepares the codebase for moving JWT tokens
from Redux state to httpOnly cookies in a follow-up PR.

Changes:
- Added cookie-parser dependency for HTTP cookie handling
- Added cookieParser() middleware to Express application
- Created cookieHelpers.js utilities for consistent cookie options
- Includes getAuthCookieOptions() for setting secure authentication cookies
- Includes getClearAuthCookieOptions() for clearing cookies on logout

Infrastructure only - no behavioral changes to authentication flow yet.

Files added/modified:
- package.json (cookie-parser dependency)
- src/app.js (cookieParser middleware)
- src/utils/cookieHelpers.js (cookie utilities)

Next steps:
- Follow-up PR will modify JWT verification to check cookies
- Enable secure cookie-based authentication
- Add logout functionality to clear httpOnly cookies

Risk level: LOW (infrastructure only, no authentication changes)
2025-08-11 17:47:09 -04:00
gorkem-bwl
88b68a9df0 fix: apply prettier formatting to app.js
Fixed formatting issues to pass CI/CD checks
2025-08-11 17:39:08 -04:00
gorkem-bwl
8b322a0ec0 feat: apply input sanitization to prevent XSS attacks
Enables comprehensive XSS protection by applying sanitization middleware
to all incoming requests. Uses the sanitization utilities added in previous PR.

Changes:
- Added sanitizeBody() and sanitizeQuery() middleware after express.json()
- Enhanced Content Security Policy headers for additional XSS protection
- Added 'object-src: none' and 'base-uri: self' directives
- All user inputs now automatically sanitized before processing

Security improvements:
- Prevents stored XSS attacks through HTML sanitization
- Recursive sanitization handles nested objects and arrays
- Maintains backward compatibility with existing functionality
- Strengthened CSP headers block unsafe content injection

Files changed: src/app.js (9 lines added)
Risk level: Medium (global middleware application)
2025-08-11 17:33:05 -04:00