Major changes:
- Add auth-svc: JWT auth, register/login/refresh, password reset
- Add auth UI: modals, pages (/login, /register, /forgot-password)
- Add usage tracking (usage_metrics table, daily limits)
- Add tiered rate limiting (free/pro/business)
- Add LLM usage limits per tier
Security fixes:
- All repos now require userID for Update/Delete operations
- JWT middleware in chat-svc, llm-svc, agent-svc, discover-svc
- ErrNotFound/ErrForbidden errors for proper access control
Cleanup:
- Remove legacy TypeScript services/ directory
- Remove computer-svc (to be reimplemented)
- Remove old deploy/docker configs
New files:
- backend/cmd/auth-svc/main.go
- backend/internal/auth/{types,repository}.go
- backend/internal/usage/{types,repository}.go
- backend/pkg/middleware/{llm_limits,ratelimit_tiered}.go
- backend/webui/src/components/auth/*
- backend/webui/src/app/(auth)/*
Made-with: Cursor
17 lines
524 B
Plaintext
17 lines
524 B
Plaintext
# GooSeek WebUI Configuration
|
|
|
|
# API Gateway URL (internal Docker network)
|
|
API_URL=http://api-gateway:3015
|
|
|
|
# Public API URL (for browser requests)
|
|
NEXT_PUBLIC_API_URL=
|
|
|
|
# ============================================
|
|
# === MENU VISIBILITY ===
|
|
# ============================================
|
|
|
|
# Отключённые маршруты (через запятую)
|
|
# Страницы в разработке можно скрыть из меню
|
|
# Пример: /travel,/medicine,/finance,/learning
|
|
NEXT_PUBLIC_DISABLED_ROUTES=
|