@solidstarters/create-solid-app 1.2.28 → 1.2.30

package/templates/nest-template/package.json

@@ -23,7 +23,6 @@
     "test:debug": "node --inspect-brk -r tsconfig-paths/register -r ts-node/register node_modules/.bin/jest --runInBand",
     "test:e2e": "jest --config ./test/jest-e2e.json",
     "solidx:dev": "nodemon"
-
   },
   "dependencies": {
     "@angular-devkit/core": "^18.0.3",
@@ -44,7 +43,7 @@
     "@nestjs/serve-static": "^4.0.2",
     "@nestjs/swagger": "^7.2.0",
     "@nestjs/typeorm": "^10.0.1",
-    "@solidstarters/solid-core": "^1.2.150",
+    "@solidstarters/solid-core": "^1.2.155",
     "@types/luxon": "^3.4.2",
     "amqplib": "^0.10.4",
     "axios": "^1.7.0",

package/templates/nest-template/src/app-default-database.module.ts

@@ -1,7 +1,7 @@
 import { Module } from '@nestjs/common';
 import { TypeOrmModule } from '@nestjs/typeorm';
 import * as SolidCoreModuleExports from '@solidstarters/solid-core';
-import { DatasourceType, getDynamicModuleNames, ISolidDatabaseModule, SolidDatabaseModule } from '@solidstarters/solid-core';
+import { DatasourceType, getDynamicModuleNames, ISolidDatabaseModule, parseBooleanEnv, SolidDatabaseModule } from '@solidstarters/solid-core';
 import { WINSTON_MODULE_PROVIDER } from 'nest-winston';
 import { join } from 'path';
 import { getMetadataArgsStorage } from 'typeorm';
@@ -70,9 +70,9 @@ const coreEntities = getEntitiesFromExports(SolidCoreModuleExports);
                     // autoLoadEntities: true,
                     entities: entities,
                     // your entities will be synced with the database (recommended: disable in prod)
-                    synchronize: Boolean(process.env.DEFAULT_DATABASE_SYNCHRONIZE),
-                    logging: Boolean(process.env.DEFAULT_DATABASE_LOGGING),
-                    logger: new WinstonTypeORMLogger(logger),  // Pass in the custom WinstonLogger
+                    synchronize: parseBooleanEnv('DEFAULT_DATABASE_SYNCHRONIZE'),
+                    logging: parseBooleanEnv('DEFAULT_DATABASE_LOGGING'),
+                    logger: parseBooleanEnv('DEFAULT_DATABASE_LOGGING') ? new WinstonTypeORMLogger(logger) : undefined,  // Pass in the custom WinstonLogger
                     namingStrategy: new SnakeNamingStrategy(),
                     // subscribers: subscribers
                 }

package/templates/nest-template/src/main.ts

@@ -10,10 +10,12 @@ import { ValidationPipe } from '@nestjs/common';
 import { ConfigService } from '@nestjs/config';
 import { NestFactory } from '@nestjs/core';
 import { DocumentBuilder, SwaggerModule } from '@nestjs/swagger';
-import { HttpExceptionFilter, WrapResponseInterceptor } from '@solidstarters/solid-core';
+import { buildDefaultCorsOptions, buildDefaultSecurityHeaderOptions, WrapResponseInterceptor, buildPermissionsPolicyHeader } from '@solidstarters/solid-core';
 import { NextFunction, Request, Response } from 'express';
 import { WINSTON_MODULE_NEST_PROVIDER } from 'nest-winston';
 import { AppModule } from './app.module';
+import helmet from 'helmet';
+
 
 import qs from 'qs';
 
@@ -29,6 +31,19 @@ async function bootstrap() {
   const appModule = await AppModule.forRoot();
   const app = await NestFactory.create(appModule);
 
+  // Enable Helmet middleware for security
+  app.use(helmet(buildDefaultSecurityHeaderOptions()));
+
+  // Enable Permission policy header
+  app.use((req: Request, _res: Response, next: NextFunction) => {
+    _res.setHeader('Permissions-Policy', buildPermissionsPolicyHeader({
+      // Example overrides:
+      // "autoplay": ['self', 'https://player.example.com'],
+      // "camera": 'none',
+    }));
+    next();
+  });
+
   // setup winston as the default logger.
   // const app = await NestFactory.create(AppModule);
   app.useLogger(app.get(WINSTON_MODULE_NEST_PROVIDER));
@@ -94,15 +109,7 @@ async function bootstrap() {
     new WrapResponseInterceptor(),
   );
 
-  // app.enableCors();
-  app.enableCors({
-    // Explicitly allow PATCH and other methods
-    methods: ['GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'OPTIONS'],
-    // Add any custom headers you use
-    allowedHeaders: ['Content-Type', 'Authorization'],
-    // If you need to send cookies or authentication headers
-    credentials: true,
-  });
+  app.enableCors(buildDefaultCorsOptions(configService));
 
   // https://github.com/typeorm/typeorm/issues/8583
   const types = require('pg').types;

package/templates/next-template/package-lock.json

@@ -13,7 +13,7 @@
         "@codemirror/theme-one-dark": "^6.1.2",
         "@hello-pangea/dnd": "^17.0.0",
         "@reduxjs/toolkit": "^1.9.5",
-        "@solidstarters/solid-core-ui": "^1.1.175",
+        "@solidstarters/solid-core-ui": "^1.1.179",
         "@uiw/react-codemirror": "^4.23.3",
         "axios": "^1.7.2",
         "bcryptjs": "^2.4.3",
@@ -1001,9 +1001,9 @@
       }
     },
     "node_modules/@solidstarters/solid-core-ui": {
-      "version": "1.1.175",
-      "resolved": "https://registry.npmjs.org/@solidstarters/solid-core-ui/-/solid-core-ui-1.1.175.tgz",
-      "integrity": "sha512-zsB3eapdzgD2eTaX1n7F4LGuHC/6CbhWcMAhaQ7n0Y4DVscx6KcQ04Q/I3ECCfrsf8v4921g6JLs/5YgCoczDw==",
+      "version": "1.1.179",
+      "resolved": "https://registry.npmjs.org/@solidstarters/solid-core-ui/-/solid-core-ui-1.1.179.tgz",
+      "integrity": "sha512-FYAt7Kt0qy7FnjLtGYtoo+1V63MDv0BRt7RytBoGVXNRYfhUcfNSJmY3D4KSRogHehW2TwGoNmbieaxBKlMsRw==",
       "license": "ISC",
       "dependencies": {
         "@faker-js/faker": "^9.9.0",

package/templates/next-template/package.json

@@ -15,7 +15,7 @@
     "@codemirror/theme-one-dark": "^6.1.2",
     "@hello-pangea/dnd": "^17.0.0",
     "@reduxjs/toolkit": "^1.9.5",
-    "@solidstarters/solid-core-ui": "^1.1.175",
+    "@solidstarters/solid-core-ui": "^1.1.179",
     "@uiw/react-codemirror": "^4.23.3",
     "axios": "^1.7.2",
     "bcryptjs": "^2.4.3",