Oliver/ppt-tool
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
ppt-tool/backend/services
History
Vadym Samoilenko 4f391a04e8 Complete critical security improvements (P0.5-P0.8) 
P0.5: Database Row-Level Security (RLS) - CRITICAL
- Created Alembic migration for RLS policies on all client-scoped tables
- Policies for: presentations, master_decks, brand_configs, slides, templates
- Updated get_async_session to set PostgreSQL session variables
- Multi-tenant isolation now enforced at database level (defense-in-depth)
- Session variables: app.current_user_id, app.user_role

P0.6: Safe Error Messages
- Created safe_exception_handler to prevent info disclosure
- Logs full errors internally with context (user_id, path, method)
- Returns generic "internal error" message to clients
- Preserves HTTPException details (intentional error messages)

P0.7: Security Headers
- Created SecurityHeadersMiddleware with comprehensive headers
- Headers: X-Content-Type-Options, X-Frame-Options, X-XSS-Protection
- CSP, Referrer-Policy, Permissions-Policy, HSTS
- Updated nginx.conf with matching security headers

P0.8: Database Connection Pool Optimization
- Increased pool_size from 5 to 20 connections
- Added max_overflow of 40 for burst traffic
- Enabled pool_pre_ping for connection health checks
- Pool recycle after 1 hour to prevent stale connections
- Configurable via DB_POOL_SIZE, DB_MAX_OVERFLOW, DB_POOL_RECYCLE

All critical pre-launch security tasks complete. System now has:
✅ CORS protection
✅ Rate limiting
✅ Request size limits
✅ Database-level tenant isolation (RLS)
✅ Safe error handling
✅ Security headers
✅ Optimized connection pooling

Co-Authored-By: Claude Sonnet 4.5 (1M context) <noreply@anthropic.com>
2026-02-27 18:33:58 +00:00
..
__init__.py Phase 1-2: Foundation + Admin Panel & Client Management 2026-02-26 15:37:17 +00:00
access_service.py Phase 1-2: Foundation + Admin Panel & Client Management 2026-02-26 15:37:17 +00:00
ai_usage_service.py Phase 2: Admin panel, analytics, storage, template pipeline, multi-provider LLM 2026-02-26 23:39:34 +00:00
attachment_parser_service.py Phase 3: Content Pipeline — file parsing, content intelligence, slide mapping, native charts 2026-02-26 15:54:04 +00:00
audit_service.py Phase 1-2: Foundation + Admin Panel & Client Management 2026-02-26 15:37:17 +00:00
auth_service.py Implement critical security fixes and modern design system (Pre-launch P0 tasks) 2026-02-27 18:28:24 +00:00
brand_enforcement_service.py Phase 4: Generation Pipeline — brand enforcement, enhanced LLM calls, ARQ job queue 2026-02-26 16:15:25 +00:00
chart_data_extractor.py Phase 3: Content Pipeline — file parsing, content intelligence, slide mapping, native charts 2026-02-26 15:54:04 +00:00
concurrent_service.py Phase 1-2: Foundation + Admin Panel & Client Management 2026-02-26 15:37:17 +00:00
content_intelligence_service.py Phase 3: Content Pipeline — file parsing, content intelligence, slide mapping, native charts 2026-02-26 15:54:04 +00:00
database.py Complete critical security improvements (P0.5-P0.8) 2026-02-27 18:33:58 +00:00
docling_service.py Phase 4: Fix critical bugs, improve document parsing, add vision OCR 2026-02-27 14:07:00 +00:00
documents_loader.py Phase 4: Fix critical bugs, improve document parsing, add vision OCR 2026-02-27 14:07:00 +00:00
html_to_text_runs_service.py Phase 1-2: Foundation + Admin Panel & Client Management 2026-02-26 15:37:17 +00:00
icon_finder_service.py Phase 1-2: Foundation + Admin Panel & Client Management 2026-02-26 15:37:17 +00:00
image_generation_service.py Fix image generation model and purge logic 2026-02-27 16:18:34 +00:00
layout_analysis_service.py Phase 4: Fix critical bugs, improve document parsing, add vision OCR 2026-02-27 14:07:00 +00:00
llm_client.py Phase 2: Admin panel, analytics, storage, template pipeline, multi-provider LLM 2026-02-26 23:39:34 +00:00
llm_service.py Implement critical security fixes and modern design system (Pre-launch P0 tasks) 2026-02-27 18:28:24 +00:00
llm_tool_calls_handler.py Phase 1-2: Foundation + Admin Panel & Client Management 2026-02-26 15:37:17 +00:00
master_deck_parser_service.py Implement critical security fixes and modern design system (Pre-launch P0 tasks) 2026-02-27 18:28:24 +00:00
native_chart_service.py Phase 3: Content Pipeline — file parsing, content intelligence, slide mapping, native charts 2026-02-26 15:54:04 +00:00
pptx_presentation_creator.py Phase 3: Content Pipeline — file parsing, content intelligence, slide mapping, native charts 2026-02-26 15:54:04 +00:00
redis_service.py Phase 4: Generation Pipeline — brand enforcement, enhanced LLM calls, ARQ job queue 2026-02-26 16:15:25 +00:00
retention_service.py Phase 6: Export & Polish — brand export, client dashboard, retention, analytics 2026-02-26 16:41:58 +00:00
score_based_chunker.py Phase 1-2: Foundation + Admin Panel & Client Management 2026-02-26 15:37:17 +00:00
settings_service.py Phase 3: Bug fixes, feature enhancements, and polish 2026-02-27 12:58:52 +00:00
slide_mapping_engine.py Phase 3: Content Pipeline — file parsing, content intelligence, slide mapping, native charts 2026-02-26 15:54:04 +00:00
temp_file_service.py Rebrand Presenton to Oliver DeckForge, pre-configure models, use NanoBanana Pro 2026-02-26 18:17:11 +00:00
webhook_service.py Phase 1-2: Foundation + Admin Panel & Client Management 2026-02-26 15:37:17 +00:00