@solidstarters/create-solid-app 1.2.29 → 1.2.30

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@solidstarters/create-solid-app",
-  "version": "1.2.29",
+  "version": "1.2.30",
   "main": "index.js",
   "private": false,
   "publishConfig": {

package/templates/nest-template/package-lock.json

@@ -27,7 +27,7 @@
         "@nestjs/serve-static": "^4.0.2",
         "@nestjs/swagger": "^7.2.0",
         "@nestjs/typeorm": "^10.0.1",
-        "@solidstarters/solid-core": "^1.2.153",
+        "@solidstarters/solid-core": "^1.2.155",
         "@types/luxon": "^3.4.2",
         "amqplib": "^0.10.4",
         "axios": "^1.7.0",
@@ -4145,6 +4145,17 @@
         }
       }
     },
+    "node_modules/@nestjs/throttler": {
+      "version": "6.4.0",
+      "resolved": "https://registry.npmjs.org/@nestjs/throttler/-/throttler-6.4.0.tgz",
+      "integrity": "sha512-osL67i0PUuwU5nqSuJjtUJZMkxAnYB4VldgYUMGzvYRJDCqGRFMWbsbzm/CkUtPLRL30I8T74Xgt/OQxnYokiA==",
+      "license": "MIT",
+      "peerDependencies": {
+        "@nestjs/common": "^7.0.0 || ^8.0.0 || ^9.0.0 || ^10.0.0 || ^11.0.0",
+        "@nestjs/core": "^7.0.0 || ^8.0.0 || ^9.0.0 || ^10.0.0 || ^11.0.0",
+        "reflect-metadata": "^0.1.13 || ^0.2.0"
+      }
+    },
     "node_modules/@nestjs/typeorm": {
       "version": "10.0.2",
       "resolved": "https://registry.npmjs.org/@nestjs/typeorm/-/typeorm-10.0.2.tgz",
@@ -5187,9 +5198,9 @@
       }
     },
     "node_modules/@solidstarters/solid-core": {
-      "version": "1.2.153",
-      "resolved": "https://registry.npmjs.org/@solidstarters/solid-core/-/solid-core-1.2.153.tgz",
-      "integrity": "sha512-cpNMFM9x8XqTeqDSwULKOym4IHo4E2ai534hvqNG6Zw+qp6FD4EcaCFpG+zWmf/X/loZ+2M4UjbLXGZIkHAPow==",
+      "version": "1.2.155",
+      "resolved": "https://registry.npmjs.org/@solidstarters/solid-core/-/solid-core-1.2.155.tgz",
+      "integrity": "sha512-pdvVFgtCsY/ihtur72k5qxm7cNL+4+I6Oj4vVw8S6OGkyDpWO+ZcKcrm+VnWc0ZXswzwQ3jg2FB2Q9smhgQuPQ==",
       "license": "ISC",
       "dependencies": {
         "@angular-devkit/core": "^18.0.3",
@@ -5199,6 +5210,7 @@
         "@elasticemail/elasticemail-client": "^4.0.23",
         "@hapi/joi": "^17.1.1",
         "@nestjs/schedule": "^6.0.0",
+        "@nestjs/throttler": "^6.4.0",
         "amqplib": "^0.10.4",
         "axios": "^1.7.0",
         "bcrypt": "^5.1.1",
@@ -5210,6 +5222,7 @@
         "exceljs": "^4.4.0",
         "fast-csv": "^5.0.2",
         "handlebars": "^4.7.8",
+        "helmet": "^8.1.0",
         "ioredis": "^5.4.1",
         "locale-codes": "^1.3.1",
         "lodash": "^4.17.21",
@@ -10470,6 +10483,15 @@
         "he": "bin/he"
       }
     },
+    "node_modules/helmet": {
+      "version": "8.1.0",
+      "resolved": "https://registry.npmjs.org/helmet/-/helmet-8.1.0.tgz",
+      "integrity": "sha512-jOiHyAZsmnr8LqoPGmCjYAaiuWwjAPLgY8ZX2XrmHawt99/u1y6RgrZMTeoPfpUbV96HOalYgz1qzkRbw54Pmg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18.0.0"
+      }
+    },
     "node_modules/hexoid": {
       "version": "1.0.0",
       "resolved": "https://registry.npmjs.org/hexoid/-/hexoid-1.0.0.tgz",

package/templates/nest-template/package.json

@@ -23,7 +23,6 @@
     "test:debug": "node --inspect-brk -r tsconfig-paths/register -r ts-node/register node_modules/.bin/jest --runInBand",
     "test:e2e": "jest --config ./test/jest-e2e.json",
     "solidx:dev": "nodemon"
-
   },
   "dependencies": {
     "@angular-devkit/core": "^18.0.3",
@@ -44,7 +43,7 @@
     "@nestjs/serve-static": "^4.0.2",
     "@nestjs/swagger": "^7.2.0",
     "@nestjs/typeorm": "^10.0.1",
-    "@solidstarters/solid-core": "^1.2.153",
+    "@solidstarters/solid-core": "^1.2.155",
     "@types/luxon": "^3.4.2",
     "amqplib": "^0.10.4",
     "axios": "^1.7.0",

package/templates/nest-template/src/main.ts

@@ -10,10 +10,12 @@ import { ValidationPipe } from '@nestjs/common';
 import { ConfigService } from '@nestjs/config';
 import { NestFactory } from '@nestjs/core';
 import { DocumentBuilder, SwaggerModule } from '@nestjs/swagger';
-import { HttpExceptionFilter, WrapResponseInterceptor } from '@solidstarters/solid-core';
+import { buildDefaultCorsOptions, buildDefaultSecurityHeaderOptions, WrapResponseInterceptor, buildPermissionsPolicyHeader } from '@solidstarters/solid-core';
 import { NextFunction, Request, Response } from 'express';
 import { WINSTON_MODULE_NEST_PROVIDER } from 'nest-winston';
 import { AppModule } from './app.module';
+import helmet from 'helmet';
+
 
 import qs from 'qs';
 
@@ -29,6 +31,19 @@ async function bootstrap() {
   const appModule = await AppModule.forRoot();
   const app = await NestFactory.create(appModule);
 
+  // Enable Helmet middleware for security
+  app.use(helmet(buildDefaultSecurityHeaderOptions()));
+
+  // Enable Permission policy header
+  app.use((req: Request, _res: Response, next: NextFunction) => {
+    _res.setHeader('Permissions-Policy', buildPermissionsPolicyHeader({
+      // Example overrides:
+      // "autoplay": ['self', 'https://player.example.com'],
+      // "camera": 'none',
+    }));
+    next();
+  });
+
   // setup winston as the default logger.
   // const app = await NestFactory.create(AppModule);
   app.useLogger(app.get(WINSTON_MODULE_NEST_PROVIDER));
@@ -94,15 +109,7 @@ async function bootstrap() {
     new WrapResponseInterceptor(),
   );
 
-  // app.enableCors();
-  app.enableCors({
-    // Explicitly allow PATCH and other methods
-    methods: ['GET', 'POST', 'PUT', 'PATCH', 'DELETE', 'OPTIONS'],
-    // Add any custom headers you use
-    allowedHeaders: ['Content-Type', 'Authorization'],
-    // If you need to send cookies or authentication headers
-    credentials: true,
-  });
+  app.enableCors(buildDefaultCorsOptions(configService));
 
   // https://github.com/typeorm/typeorm/issues/8583
   const types = require('pg').types;

package/templates/next-template/package-lock.json

@@ -13,7 +13,7 @@
         "@codemirror/theme-one-dark": "^6.1.2",
         "@hello-pangea/dnd": "^17.0.0",
         "@reduxjs/toolkit": "^1.9.5",
-        "@solidstarters/solid-core-ui": "^1.1.177",
+        "@solidstarters/solid-core-ui": "^1.1.179",
         "@uiw/react-codemirror": "^4.23.3",
         "axios": "^1.7.2",
         "bcryptjs": "^2.4.3",
@@ -1001,9 +1001,9 @@
       }
     },
     "node_modules/@solidstarters/solid-core-ui": {
-      "version": "1.1.177",
-      "resolved": "https://registry.npmjs.org/@solidstarters/solid-core-ui/-/solid-core-ui-1.1.177.tgz",
-      "integrity": "sha512-4D4egSKnDtMNf8Y0Dtm96ZDdY+qk9fd5y4uimInq1x8zpiV2N1/8KkNqTnyQbHYnH3yroqgJ5OoKjVDY0P4wuA==",
+      "version": "1.1.179",
+      "resolved": "https://registry.npmjs.org/@solidstarters/solid-core-ui/-/solid-core-ui-1.1.179.tgz",
+      "integrity": "sha512-FYAt7Kt0qy7FnjLtGYtoo+1V63MDv0BRt7RytBoGVXNRYfhUcfNSJmY3D4KSRogHehW2TwGoNmbieaxBKlMsRw==",
       "license": "ISC",
       "dependencies": {
         "@faker-js/faker": "^9.9.0",

package/templates/next-template/package.json

@@ -15,7 +15,7 @@
     "@codemirror/theme-one-dark": "^6.1.2",
     "@hello-pangea/dnd": "^17.0.0",
     "@reduxjs/toolkit": "^1.9.5",
-    "@solidstarters/solid-core-ui": "^1.1.177",
+    "@solidstarters/solid-core-ui": "^1.1.179",
     "@uiw/react-codemirror": "^4.23.3",
     "axios": "^1.7.2",
     "bcryptjs": "^2.4.3",