PTah
80320ae698
Close audit findings: anti-spoof client IP for login rate limit, JWT/CORS enforce on startup, SSH host-key verification and sudo via stdin, optional WinRM HTTPS, SSE httpOnly cookie auth, ingest body limit, ILIKE escaping, and HMAC API key hashing with legacy SHA-256 fallback.
Backend — Security Alert Center
FastAPI + PostgreSQL + Alembic.
Production (native на Ubuntu 24.04)
См. docs/install-ubuntu-24.04-native.md.
Кратко:
cd /opt/security-alert-center/backend
python3.12 -m venv .venv && .venv/bin/pip install -r requirements.txt
# /opt/security-alert-center/config/sac-api.env — см. deploy/env.native.example
alembic upgrade head
systemctl start sac-api
Локальная разработка
cd backend
python3.12 -m venv .venv
source .venv/bin/activate
pip install -r requirements.txt
export DATABASE_URL=postgresql+psycopg2://sac:sac@localhost:5432/sac
export SAC_BOOTSTRAP_API_KEY=sac_dev_test_key
export EVENT_SCHEMA_PATH=../schemas/event-schema-v1.json
alembic upgrade head
uvicorn app.main:app --reload --port 8000
Docker (альтернатива)
docs/install-ubuntu-24.04-docker.md
API
| Метод | Путь | Auth |
|---|---|---|
| GET | /health |
нет |
| POST | /api/v1/events |
Bearer API key |