BetterFrame/server
Mitchell R 5d23079086
feat: add anyvali input validation to all external API endpoints
Create shared/api-schemas.ts with av.object schemas for:
- pair/initiate, pair/claim (pairing flow)
- kiosk/heartbeat (telemetry with displays, partitions, hwmon)
- kiosk/event (ONVIF/system events)
- kiosk/logs (batched log entries)
- firmware/applied, os/applied (update reports)
- auth/login, auth/totp, setup (admin auth)

Each endpoint now calls validateBody(Schema, body) which returns 400
on schema violation. All string fields have maxLength, numeric fields
have min/max ranges, arrays strip unknown keys. Rejects malformed
input before it reaches DB or business logic.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-05-26 14:03:58 +02:00
..
src feat: add anyvali input validation to all external API endpoints 2026-05-26 14:03:58 +02:00
.gitignore build fixes for bsb 2026-05-10 01:46:11 +02:00
bsb-tests.json refactor(db): move service-store from BSB plugin to shared/db library 2026-05-24 02:48:32 +02:00
package.json fix(docker): package name betterframe + copy nodered workspace pkg 2026-05-24 03:17:43 +02:00
tsconfig.json adding initial project 2026-05-10 01:09:13 +02:00