New React Backend Repository
Find a file
Alexandre Brandizzi 32de36f78c fix(backend): sanitize exception disclosure in changed API endpoints
Replace raw exception-message disclosure (ex.Message) returned to API
callers with a stable sanitized public message plus correlated structured
internal logging, across the endpoints changed in this PR.

- Add SanitizedErrors helper: logs the original exception at Error with a
  generated correlation id and returns a stable public message referencing
  it so support can trace without exposing internals.
- Inject ILogger<T> into the 14 changed controllers and route every
  ex.Message/dbex.Message disclosure through the helper, preserving status
  codes, response shapes, and business data (e.g. OpenWorkOrders).
- Leave FluentValidation (vex.Errors) and existing fixed-message catches
  untouched; out-of-scope controllers (Account/Contact/Employee/Asset/
  PMSchedule) are unchanged.
- Add focused tests proving internal exception text is not returned and
  that Error logging carrying the original exception is invoked.
2026-07-24 14:14:39 -03:00
.github refactor(backend): enforce architecture and optimize dispatch 2026-07-24 12:07:48 -03:00
Api.SeaHavenIndustries fix(backend): sanitize exception disclosure in changed API endpoints 2026-07-24 14:14:39 -03:00
Api.SeaHavenIndustries.Tests fix(backend): sanitize exception disclosure in changed API endpoints 2026-07-24 14:14:39 -03:00
Data.SeaHavenIndustries refactor(vendors): enforce service and data boundaries 2026-07-24 11:26:37 -03:00
SeaHaven.DataServices style(backend): format changed architecture files 2026-07-24 12:13:51 -03:00
SeaHaven.Services fix(architecture): address backend review follow-ups 2026-07-24 13:16:34 -03:00
SeaHaven.Services.Tests Add starter unit tests for validators, DTO mappers, and PagedResult (#9) 2026-06-22 18:56:46 -04:00
SeaHavenIndustries Add calendar/events backend API (#8) 2026-06-22 18:46:46 -04:00
SeaHavenIndustries.Tests refactor(workorders): enforce service and data boundaries 2026-07-24 11:30:22 -03:00
.env.example fix(security): remove hardcoded secrets from source 2026-06-05 11:56:54 -04:00
.gitattributes Initial commit 2024-09-28 14:58:36 -04:00
.gitignore Add project TODO tracking deferred work items 2026-04-17 13:08:12 -04:00
BACKEND_ARCHITECTURE.md refactor(backend): enforce architecture and optimize dispatch 2026-07-24 12:07:48 -03:00
SeaHavenIndustries.sln test(work-orders): add Phase 0 domain unit tests 2026-07-02 09:19:28 -03:00
TODO.md Update TODO with completed items and vendor portal next steps 2026-04-17 16:33:17 -04:00