Skip to content

feat: enterprise production hardening - 12 security and infrastructure improvements#43

Merged
NeuroKoder3 merged 4 commits intomainfrom
security/enterprise-production-hardening
Mar 27, 2026
Merged

feat: enterprise production hardening - 12 security and infrastructure improvements#43
NeuroKoder3 merged 4 commits intomainfrom
security/enterprise-production-hardening

Conversation

@NeuroKoder3
Copy link
Owner

@NeuroKoder3 NeuroKoder3 commented Mar 27, 2026

Summary

Implements all 12 enterprise production readiness improvements identified in the codebase assessment:

  • Rate limiting: All IPC handlers now go through sliding-window rate limiting via ipcMain.handle middleware interception
  • Auto-update: Enterprise builds use electron-updater with GitHub Releases as the update source (check on launch + every 4 hours)
  • Code signing & notarization: Both enterprise and evaluation electron-builder configs now include Windows code signing (CSC_LINK/CSC_KEY_PASSWORD), macOS hardened runtime + notarization (afterSign hook), and a notarize.cjs script
  • Structured logging & crash reporting: New logger.cjs writes JSON-structured logs to rotating files in userData/logs, and registers Electron crashReporter with local-only minidumps. Wired into main.cjs lifecycle
  • Default password fix: Changed from weak 'Admin123!' (9 chars) to 'TransTrack#Admin2026!' (21 chars). Login now returns mustChangePassword flag; password change handler clears the flag
  • CI hardening: Removed '|| true' from npm audit and lint steps, switched from 'npm install' to 'npm ci', added SBOM generation step with artifact upload
  • Migration rollback: Added rollbackSql field to all migrations, new rollbackLastMigration() function, and schema_migrations table now stores rollback SQL
  • HMAC license validation: License keys are now signed with HMAC-SHA256 on activation/renewal. validateLicenseData checks integrity and logs tamper attempts
  • Professional payment config: Replaced personal PayPal email (lilnicole0383@gmail.com) with Stripe payment links and billing@transtrack.medical across all files (tiers.cjs, manager.cjs, frontend components, docs)
  • SBOM generation: Added @cyclonedx/cyclonedx-npm to devDependencies and SBOM step to CI workflow with 90-day artifact retention
  • Pinned dependencies: Removed ^ caret from all 60+ dependency versions in package.json for deterministic builds. Added electron-updater, @electron/notarize, @cyclonedx/cyclonedx-npm
  • Session binding: Sessions are now bound to the WebContents ID that authenticated, preventing session riding from injected/rogue renderer contexts

Files Changed (19)

  • .github/workflows/ci.yml
  • PRICING.md, docs/LICENSING.md
  • electron-builder.enterprise.json, electron-builder.evaluation.json
  • electron/database/init.cjs, electron/database/migrations.cjs
  • electron/ipc/handlers.cjs, electron/ipc/handlers/auth.cjs, electron/ipc/shared.cjs
  • electron/license/manager.cjs, electron/license/tiers.cjs
  • electron/main.cjs
  • electron/services/logger.cjs (new)
  • scripts/notarize.cjs (new)
  • package.json
  • src/api/localClient.js, src/components/license/UpgradePrompt.jsx, src/pages/LicenseActivation.jsx

Test plan

  • Verify CI pipeline runs successfully (npm ci, audit, lint, tests, SBOM)
  • Verify rate limiting triggers on rapid IPC calls
  • Verify login returns mustChangePassword for default admin
  • Verify license activation stores and validates HMAC
  • Verify structured logs appear in userData/logs/transtrack.log
  • Verify payment links point to Stripe URLs, no PayPal references remain
  • Verify session is invalidated when accessed from a different WebContents

@NeuroKoder3
feat: enterprise production hardening - 12 security and infrastructur…
b98ec70 
…e improvements

1. Wire rate limiter to all IPC handlers via ipcMain.handle middleware

2. Add electron-updater auto-update mechanism for enterprise builds

3. Add code signing, notarization config, and afterSign hook

4. Add structured JSON logger with log rotation and crash reporter

5. Fix weak default admin password, enforce must_change_password on login

6. Harden CI pipeline - remove fallthrough on audit/lint, use npm ci

7. Add migration rollback support with stored rollback SQL

8. Add HMAC-based license key integrity validation to prevent tampering

9. Replace personal PayPal with professional Stripe payment config

10. Add SBOM generation (CycloneDX) to CI build pipeline

11. Pin all dependency versions (remove caret ranges)

12. Bind session validation to WebContents sender ID
@NeuroKoder3
fix: pin dependency versions to actual installed versions and regener…
15581ff 
…ate lockfile
@NeuroKoder3
fix: remove cyclonedx and notarize from devDeps (used via npx/build o…
a3eead9 
…nly), regenerate lockfile
@NeuroKoder3
fix: unref rate limiter cleanup timer to prevent test process hanging
7464ea9
@NeuroKoder3 NeuroKoder3 merged commit 4e35160 into main Mar 27, 2026
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@NeuroKoder3