r-dev
b342d0e50a
- Remove orphaned PUBLIC_ACCESS rule for deleted /api/test route - Remove JWT login firewall (app is session-based only) - Set APP_SECRET placeholder (real value must be in .env.local) - Remove JWT env vars from .env - Add session regeneration on login (prevent session fixation) - Remove Document.path from API serialization groups (prevent path leak) - Restrict health check details to ROLE_ADMIN (anonymes get status only) - Add path traversal guard in DocumentStorageService - Convert CreateProfileCommand password to interactive hidden prompt - Restrict Profile Get endpoint to ROLE_ADMIN - Change api firewall to stateless: false (matches session-based auth) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
58 lines
1.7 KiB
PHP
58 lines
1.7 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Controller;
|
|
|
|
use DateTimeImmutable;
|
|
use DateTimeInterface;
|
|
use Doctrine\DBAL\Connection;
|
|
use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
|
|
use Symfony\Component\HttpFoundation\JsonResponse;
|
|
use Symfony\Component\Routing\Attribute\Route;
|
|
use Throwable;
|
|
|
|
class HealthCheckController extends AbstractController
|
|
{
|
|
#[Route('/api/health', name: 'api_health', methods: ['GET'])]
|
|
public function __invoke(Connection $connection): JsonResponse
|
|
{
|
|
$dbOk = false;
|
|
|
|
try {
|
|
$start = hrtime(true);
|
|
$connection->executeQuery('SELECT 1');
|
|
$dbLatency = round((hrtime(true) - $start) / 1e6, 1);
|
|
$dbOk = true;
|
|
} catch (Throwable) {
|
|
$dbLatency = null;
|
|
}
|
|
|
|
$healthy = $dbOk;
|
|
$data = ['status' => $healthy ? 'ok' : 'degraded'];
|
|
|
|
if ($this->isGranted('ROLE_ADMIN')) {
|
|
$version = '0.0.0';
|
|
$versionFile = $this->getParameter('kernel.project_dir').'/VERSION';
|
|
if (file_exists($versionFile)) {
|
|
$version = trim(file_get_contents($versionFile));
|
|
}
|
|
|
|
$data += [
|
|
'version' => $version,
|
|
'timestamp' => new DateTimeImmutable()->format(DateTimeInterface::ATOM),
|
|
'php' => PHP_VERSION,
|
|
'checks' => [
|
|
'database' => [
|
|
'status' => $dbOk ? 'ok' : 'down',
|
|
'latency_ms' => $dbLatency,
|
|
],
|
|
],
|
|
'memory_mb' => round(memory_get_usage(true) / 1024 / 1024, 1),
|
|
];
|
|
}
|
|
|
|
return $this->json($data, $healthy ? 200 : 503);
|
|
}
|
|
}
|