Repository navigation
Changelog
Added
- Centralized environment configuration using
.env. .env.exampletemplate with required variables and documentation.- Configurable JVM options through
JAVA_OPTS. - Configurable service ports using environment variables.
- Frontend Nginx configuration for SPA routing support.
- Explicit CORS headers and exposed authorization headers.
- Preflight request cache support (
maxAge) for CORS optimization. - Configurable JPA logging and DDL strategies.
- Improved startup consistency across all services.
- Gateway validation support for OPTIONS requests.
Changed
- Refactored all Spring Boot services to use environment variables instead of hardcoded values.
- Migrated Docker images from
eclipse-temurin:17-jdkto lighter17-jre. - Updated frontend build image from Node 18 to Node 20.
- Enhanced API Gateway CORS configuration for frontend/backend interoperability.
- Improved JWT and gateway secret management.
- Authentication service security flow simplified and centralized through API Gateway.
- Standardized datasource configuration across all microservices.
- Updated Docker Compose configuration and deployment flow.
- Reduced startup wait time from 240s to 150s.
- Improved Swagger and API documentation accessibility.
Security
- Removed hardcoded secrets from project configuration files.
- Enforced required environment variables for critical services.
- Added proper unauthorized response handling for invalid credentials.
- Restricted allowed CORS headers to explicit secure headers.
- Improved gateway validation filtering logic.
- Centralized CORS handling exclusively at API Gateway level.
- Added authentication and Swagger route bypass handling for filters.
Removed
- Direct secret values from
application.properties. - Redundant CORS configuration inside authentication-service.
- Deprecated
env_filereferences in Docker Compose. - Unnecessary duplicate security and filter logic.
Result
These improvements provide:
- Better security practices
- Cleaner deployment configuration
- Improved Docker efficiency
- Easier environment portability
- More maintainable infrastructure
- Better frontend/backend integration
- More production-ready microservices architecture
Assets
- Updated source code
- Updated Docker configuration
- Updated environment configuration templates
- Updated deployment setup