Refactoring

[CedrikNikita]

Note

Medium Risk
Touches API surface hardening (CORS, Swagger/GraphQL introspection, websocket behavior, API key auth) and DB sync behavior; misconfiguration could break clients or deployments, but changes are mostly additive safeguards.

Overview
Hardens production security defaults and reduces accidental data/PII exposure. Swagger is now disabled in production unless ENABLE_SWAGGER=true, GraphQL introspection/GraphiQL are disabled in production, helmet is added, and CORS/socket.io origins become configurable via new ALLOWED_ORIGINS parsing with credentials only enabled when an explicit allowlist is set.

Tightens sensitive endpoints and guards. TRENDING_TAGS_API_KEY no longer has a default, production logs warn when it’s missing/too short, and the ApiKeyGuard enforces minimum length plus constant-time comparison. Affiliation invite redemption now returns only minimal data (no full OAuth profile / claimed-by fields).

Reduces operational foot-guns. TypeORM DB_SYNC is ignored in production with a warning (preventing destructive schema sync), compose files bind Postgres/Redis ports to loopback, testnet runs with NODE_ENV=staging to keep DB_SYNC usable, and the Docker image runs as the unprivileged node user.

Fixes injection/broadcast vectors. The token rankings raw SQL query is parameterized, and the token websocket gateway removes client-driven @SubscribeMessage relays so only server-side services can emit events.

^{Reviewed by Cursor Bugbot for commit a0d5d4c. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 4 potential issues.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 0ddde14. Configure here.}