Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: added hmac and obfuscate api module #294

Merged
merged 1 commit into from
May 23, 2024
Merged

feat: added hmac and obfuscate api module #294

merged 1 commit into from
May 23, 2024

Conversation

fagundesjg
Copy link
Collaborator

Pull Request: Novas Features de Segurança e Obfuscação

Descrição

Este Pull Request introduz duas novas features importantes para aumentar a segurança das chamadas de API no projeto. As mudanças são descritas abaixo:

1. Interceptor no Axios para Adicionar Headers HMAC

  • Funcionalidade: Implementado um interceptor no Axios que adiciona automaticamente os headers HMAC (x-hmac-signature e x-hmac-timestamp) a todas as chamadas para a API.
  • Motivação: Garantir que todas as requisições para a API sejam autenticadas e protegidas usando HMAC, fornecendo uma camada adicional de segurança.
  • Implementação: O interceptor gera o HMAC usando o método, URL, timestamp e corpo da requisição, e adiciona os headers apropriados antes de enviar a requisição.

2. Obfuscação do Módulo de API

  • Funcionalidade: Adicionada obfuscação ao módulo de API do projeto para proteger o secret do HMAC quando em produção.
  • Motivação: Proteger o secret do HMAC contra engenharia reversa e outras tentativas de exposição, garantindo que o segredo permaneça seguro mesmo se o código for acessado.
  • Implementação: Utilização de javascript-obfuscator para ofuscar o código do módulo de API durante o processo de build em ambientes de produção.

@fagundesjg fagundesjg merged commit d208bf1 into develop May 23, 2024
fagundesjg added a commit that referenced this pull request May 23, 2024
* fix/ add lucide icons to replace emojis so it works across all browsers

* feat: added shelter category

* setup shadcdn combobox

* remove new item btn

* add autocomplete with search

* handle add new item

* add clear feat

* cleanup

* cleanup

* cleanup

* fix imports

* fix: new item keeps on when item selected

* update text

* add text above list

* add initial filter to show only stored supplies

* Add contributing

* remove unused import

* Resolves #284

* review

* removes unusued session context

* finishing

* removes unusued functions

* feat: added more contributors to about me page (#292)

* feat: added hmac and obfuscate api module (#294)

---------

Co-authored-by: andradeviniicius <viniciusdandrade01@gmail.com>
Co-authored-by: Larissa Pissurno <larissapissurno@gmail.com>
Co-authored-by: Giovanni Bassi <giggio@giggio.net>
Co-authored-by: Vinicius Silveira <vinnysilveira09@gmail.com>
Co-authored-by: rayanerocha07 <rayane.rocha07@gmail.com>
fagundesjg added a commit that referenced this pull request May 24, 2024
* fix/ add lucide icons to replace emojis so it works across all
browsers

* feat: added shelter category

* setup shadcdn combobox

* remove new item btn

* add autocomplete with search

* handle add new item

* add clear feat

* cleanup

* cleanup

* cleanup

* fix imports

* fix: new item keeps on when item selected

* update text

* add text above list

* add initial filter to show only stored supplies

* Add contributing

* remove unused import

* Resolves #284

* review

* removes unusued session context

* finishing

* removes unusued functions

* feat: added more contributors to about me page (#292)

* feat: added hmac and obfuscate api module (#294)

---------
AlchemistByte pushed a commit to AlchemistByte/frontend that referenced this pull request Jun 6, 2024
* fix/ add lucide icons to replace emojis so it works across all browsers

* feat: added shelter category

* setup shadcdn combobox

* remove new item btn

* add autocomplete with search

* handle add new item

* add clear feat

* cleanup

* cleanup

* cleanup

* fix imports

* fix: new item keeps on when item selected

* update text

* add text above list

* add initial filter to show only stored supplies

* Add contributing

* remove unused import

* Resolves SOS-RS#284

* review

* removes unusued session context

* finishing

* removes unusued functions

* feat: added more contributors to about me page (SOS-RS#292)

* feat: added hmac and obfuscate api module (SOS-RS#294)

---------

Co-authored-by: andradeviniicius <viniciusdandrade01@gmail.com>
Co-authored-by: Larissa Pissurno <larissapissurno@gmail.com>
Co-authored-by: Giovanni Bassi <giggio@giggio.net>
Co-authored-by: Vinicius Silveira <vinnysilveira09@gmail.com>
Co-authored-by: rayanerocha07 <rayane.rocha07@gmail.com>
AlchemistByte pushed a commit to AlchemistByte/frontend that referenced this pull request Jun 6, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant