Backend на Go (Fiber + PostgreSQL + Redis + MinIO)
c30faf02ef
1. CORS whitelist (was '*'): only buhapp.mygoodservice.ru, t.me, web.telegram.org 2. Rate limit on /auth/login (10/min/IP) and /auth/register (5/hour/IP) 3. TGHandler: removed unused JWTSecret, added WebhookSecret, real secret check 4. Login: constant-time bcrypt on user enumeration (dummy hash) 5. TgUsername saved in users (was lost) 6. User.IsVerified=true for Telegram users 7. Register: 409 instead of 500 on duplicate email 8. Bumped version to 0.4.0 |
||
|---|---|---|
| cmd/server | ||
| internal | ||
| migrations | ||
| tests | ||
| .env.example | ||
| .gitignore | ||
| docker-compose.yml | ||
| Dockerfile | ||
| go.mod | ||
| README.md | ||
BuhApp Backend
Backend на Go (Fiber) для приложения BuhApp.
Стек
- Go 1.22+
- Fiber v2 (HTTP framework)
- PostgreSQL 16 (pgx/v5)
- Redis 7 (go-redis)
- MinIO (S3-compatible storage)
- JWT (golang-jwt)
- bcrypt (golang.org/x/crypto)
Структура
buhapp-backend/
├── cmd/server/main.go — точка входа
├── internal/
│ ├── config/ — конфигурация (.env)
│ ├── db/ — PostgreSQL, миграции
│ ├── redis/ — Redis клиент
│ ├── storage/ — MinIO клиент
│ ├── auth/ — JWT, регистрация, логин
│ ├── users/ — профили
│ ├── consent/ — лог согласий (юридика)
│ ├── audit/ — audit_log
│ ├── legal/ — версии документов
│ ├── middleware/ — auth, rate limit
│ └── handlers/ — HTTP handlers
├── migrations/ — SQL миграции
├── Dockerfile
├── docker-compose.yml
├── .env.example
└── README.md
Запуск (dev)
docker compose up -d postgres redis minio
go run cmd/server/main.go
API
См. /buhapp-docs/TZ.md для полного списка.