4 Commits

Author	SHA1	Message	Date
Muhammed Mustafa	01b9bd9245	fix(api): fix eslint error (#50080)	2023-04-17 20:21:36 +05:30
Oliver Eyton-Williams	6289efbbad	test(api): always start server before testing (#49994)	2023-04-17 17:54:50 +07:00
Oliver Eyton-Williams	71d5a67745	feat(api): add security headers (#49995) ... * feat(api): add security headers Includes the OWASP recommended headers for REST APIs. Taken from https://cheatsheetseries.owasp.org/cheatsheets/REST_Security_Cheat_Sheet.html#security-headers * test: check OWASP headers appear on GET / request * fix: only enable Strict-Transport-Security in prod	2023-04-13 10:16:58 +02:00
Oliver Eyton-Williams	a128dd8fcd	chore(api): compile TS into /dist (#49812 ... * chore: compile TS into /dist Having the output co-located with the source meant that the js would be imported by default. Given that we don't recompile on source changes, this means the server got 'stuck' at the point of compilation and would only register changes on build. Also, compiling to a dist directory should make it easier to build when we want to deploy. That said, the motivation is mostly DX. * fix: put schema.prisma in the default location	2023-03-28 19:42:20 +05:30