2 Commits

Author	SHA1	Message	Date
pezkuwichain	768034a91f	fix: Configure Supabase and add database schema for sign up ... - Update VITE_SUPABASE_URL to correct API endpoint - Update .env.example with correct Supabase project URL - Add comprehensive database migration script (001_initial_schema.sql) - Create profiles, admin_roles, wallets, and referral_history tables - Implement Row Level Security (RLS) on all tables - Add auto-generation of referral codes - Add detailed Supabase setup guide (README.md) This fixes the sign up issue by: 1. Correcting invalid Supabase credentials format 2. Providing SQL schema for required database tables 3. Setting up proper RLS policies for data security To complete setup: 1. Run supabase/migrations/001_initial_schema.sql in Supabase SQL Editor 2. Add real VITE_SUPABASE_ANON_KEY to .env file 3. Test sign up functionality 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>	2025-10-28 22:19:22 +03:00
pezkuwichain	93767711d9	feat: Add comprehensive GitHub security integration ... Security Infrastructure: - Add .gitattributes for merge conflict protection and sensitive file handling - Add SECURITY.md with detailed security policies and procedures - Add pre-commit hook template for local secret detection - Add GitHub Actions workflow for automated security scanning - Add comprehensive documentation for git hooks Code Security Improvements: - Fix AuthContext.tsx: Remove hardcoded credentials, use environment variables - Migrate WalletContext.tsx: Replace Ethereum/MetaMask with Polkadot.js - Refactor lib/wallet.ts: Complete Substrate configuration with asset management - Update TokenSwap.tsx: Add real API integration for balance queries - Update StakingDashboard.tsx: Add blockchain integration placeholders Environment Management: - Update .env with proper security warnings - Update .env.example with comprehensive template - All sensitive data now uses environment variables - Demo mode controllable via VITE_ENABLE_DEMO_MODE flag Security Measures Implemented: ✅ 4-layer protection (gitignore + gitattributes + pre-commit + CI/CD) ✅ Automated secret scanning (TruffleHog + Gitleaks) ✅ Pre-commit hooks prevent accidental commits ✅ CI/CD pipeline validates all PRs ✅ Environment variable validation ✅ Dependency security auditing Breaking Changes: - WalletContext now uses Polkadot.js instead of MetaMask - lib/wallet.ts completely rewritten for Substrate - ASSET_IDs and CHAIN_CONFIG exported from lib/wallet.ts - Demo mode must be explicitly enabled Migration Notes: - Install pre-commit hook: cp .git-hooks/pre-commit.example .git/hooks/pre-commit - Copy environment: cp .env.example .env - Update .env with your credentials - Enable GitHub Actions in repository settings Co-authored-by: Claude <noreply@anthropic.com>	2025-10-28 21:48:48 +03:00