Merge pull request #174 from manoahLinks/feat/security-observability-hardening

feat: security & observability hardening (#80, #82, #83, #84)

Author: Jaydbrown

package-lock.json

@@ -54,6 +54,7 @@
     "compression": "^1.8.1",
     "dotenv": "^17.4.2",
     "express": "^5.2.1",
+    "helmet": "^8.2.0",
     "ioredis": "^5.6.1",
     "joi": "^17.13.3",
     "prisma": "^7.8.0",

package.json

@@ -13,6 +13,7 @@ import { Sep10Module } from './auth/sep10/sep10.module';
 import { GlobalExceptionFilter } from './common/filters/global-exception.filter';
 import { LoggerModule } from './common/logger/logger.module';
 import { LoggerMiddleware } from './common/middleware/logger.middleware';
+import { RequestIdMiddleware } from './common/middleware/request-id.middleware';
 import { SecurityMiddleware } from './common/middleware/security.middleware';
 import { TracingMiddleware } from './tracing/tracing.middleware';
 import { TracingModule } from './tracing/tracing.module';
@@ -90,7 +91,12 @@ import { CacheService } from './common/cache.service';
 export class AppModule implements NestModule {
   configure(consumer: MiddlewareConsumer) {
     consumer
-      .apply(SecurityMiddleware, TracingMiddleware, LoggerMiddleware)
+      .apply(
+        RequestIdMiddleware,
+        SecurityMiddleware,
+        TracingMiddleware,
+        LoggerMiddleware,
+      )
       .forRoutes('*');
   }
 }