6 Commits

Author	SHA1	Message	Date
gpt-engineer-app[bot]	e28dc97d71	Migrate Phase 1 Functions ... Migrate 8 high-priority functions (admin-delete-user, mfa-unenroll, confirm-account-deletion, request-account-deletion, send-contact-message, upload-image, validate-email-backend, process-oauth-profile) to wrapEdgeFunction pattern. Replace manual CORS/auth, add shared validations, integrate standardized error handling, and preserve existing rate limiting where applicable. Update implementations to leverage context span, requestId, and improved logging for consistent error reporting and tracing.	2025-11-11 03:03:26 +00:00
gpt-engineer-app[bot]	6da29e95a4	Add rate limiting to high-risk ... Introduce centralized rate limiting by applying defined tiers (STRICT, STANDARD, LENIENT, MODERATE) to high-risk edge functions: - export-user-data (STRICT, 5 req/min) - send-contact-message (STANDARD, 20 req/min) - validate-email-backend (LENIENT, 30 req/min) - admin-delete-user, resend-deletion-code (MODERATE) - additional standard targets identified (request-account-deletion, cancel-account-deletion) as per guidance Implements: - Wrapped handlers with withRateLimit using centralized rateLimiters - Imported from shared rate limiter module - Annotated with comments explaining tier rationale - Updated three initial functions and extended coverage to admin/account management functions - Added documentation guide for rate limiting usage This aligns with the Rate Limiting Guide and centralizes rate limit configuration for consistency.	2025-11-10 21:39:37 +00:00
gpt-engineer-app[bot]	bf3da6414a	Centralize CORS configuration ... Consolidate CORS handling by introducing a shared supabase/functions/_shared/cors.ts and migrate edge functions to import from it. Remove inline cors.ts usage across functions, standardize headers (including traceparent and x-request-id), and prepare for environment-aware origins.	2025-11-10 21:28:46 +00:00
gpt-engineer-app[bot]	2d65f13b85	Connect to Lovable Cloud ... Add centralized errorFormatter to convert various error types into readable messages, and apply it across edge functions. Replace String(error) usage with formatEdgeError, update relevant imports, fix a throw to use toError, and enhance logger to log formatted errors. Includes new errorFormatter.ts and widespread updates to 18+ edge functions plus logger integration.	2025-11-10 18:09:15 +00:00
gpt-engineer-app[bot]	9529dd340e	Fix admin delete user unauthorized error	2025-11-02 02:39:31 +00:00
gpt-engineer-app[bot]	4b08836d6d	feat: Implement mandatory AAL2 for superuser actions	2025-10-30 00:48:02 +00:00