fd7cf3e35e
Security - Express console had no tenant scoping at all: LoginAdmin hardcoded tenantid 0 into every JWT and none of the 85 admin handlers filtered by tenant, so any client given a console login would read every other client's bookings, customers, pricing and reports. Adds DoormileAuth.Tenantid (nil = Doormile staff, unrestricted; set = client, scoped), emits it in the token, and scopes reads, guards writes and pins tenantid on create. - Miler telemetry (/miler/logs, /miler/status, /miler/consignments/logs) took userid from the request body, letting any authenticated rider write another rider's status and GPS trail — data the dispatch layer reasons over. Identity now comes from the token. - POST /miler/reset-pin was unauthenticated and overwrote a PIN given only a phone number, so reset-pin + verify-pin took over any rider account. Now requires admin/manager/executive auth. Correctness - Date ranges compared the container's UTC clock against timestamps the DB writes as IST wall-clock (DSN sets TimeZone=Asia/Kolkata), so "today so far" ended 5h30m in the past and silently dropped everything created after noon IST from every report. Sets TZ in the image and adds utils.DBNow/DBToday, which stay correct regardless of container timezone. - CreateMiler never set Configid, so console-created riders got the column default of 1 while LoginMiler looks up configid 1001 — every such rider was unable to log in, reported as "no miler account found". - Delivery wrote no consignment history row, so a tracking timeline never showed the parcel arriving. Features - Delivery OTP is now real (crypto/rand, issued to the receiver, verified and cleared on delivery) but opt-in per client via Tenant.Requiredeliveryotp, defaulting off — friction worth it for a courier parcel, not a food order. - Express bookings accept pickuplocationid, so the console can name a client site (a DailyGrubs kitchen) instead of retyping its address; validated against the tenant and carried through to the consignment. - TenantLocation.Locationname, miler tenantid/hubid, Nagercoil (629) opened. - PUT /miler/availability accepts both "status" and "availabilitystatus", and /miler/location no longer drops speed/heading — both were contract mismatches against the doc the Flutter dev was given. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
28 lines
872 B
Docker
28 lines
872 B
Docker
# First Stage: Build the binary using golang base image
|
|
FROM golang:1.25
|
|
|
|
RUN mkdir /app
|
|
ADD . /app/
|
|
WORKDIR /app
|
|
RUN CGO_ENABLED=0 GOOS=linux go build -o server .
|
|
|
|
# Second Stage: Run the compiled binary inside alpine
|
|
FROM alpine
|
|
|
|
# Fix: Alpine needs ca-certificates to verify SSL certificates.
|
|
# tzdata + TZ: the database connection sets TimeZone=Asia/Kolkata, so
|
|
# CURRENT_TIMESTAMP defaults write IST wall-clock into the timestamp columns.
|
|
# With the container defaulting to UTC, every time.Now() the app wrote was 5h30m
|
|
# behind those defaults, and "today so far" date ranges ended 5h30m in the past —
|
|
# which silently dropped anything created after noon IST from every report.
|
|
RUN apk add --no-cache ca-certificates tzdata
|
|
ENV TZ=Asia/Kolkata
|
|
|
|
# Copy from first stage
|
|
COPY --from=0 /app/server /app/server
|
|
|
|
WORKDIR /app
|
|
|
|
# Default startup command
|
|
CMD ["./server"]
|