FOV Backend - Changelog

All notable changes to the FOV Backend project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[Unreleased]

Planned Features

• JWT authentication for protected endpoints
• Input validation & sanitization middleware
• Rate limiting per IP
• Comprehensive API documentation (Swagger/OpenAPI)
• Database migration system
• Structured logging (Winston)
• WebSocket support for real-time notifications
• Stream quality analytics
• User subscription tiers

Security Improvements Needed

• Implement password hashing (bcrypt)
• Add HTTPS enforcement
• SQL injection prevention review
• CORS configuration hardening
• API key authentication

[0.1.0] - 2026-04-14

Added

Core Features

• Express.js REST API with modular route structure
  • User CRUD endpoints: GET /api/users/:id, POST /api/users
  • Stream management endpoints: GET /api/streams, POST /api/streams
  • Category endpoints: GET /api/categories, POST /api/categories
  • Health check: GET /

Database

• MySQL 8.0+ connection pooling via mysql2/promise
• Connection pool with configurable limits (default: 5 connections)
• Auto-reconnection on failure
• Database module with singleton pattern

Media Streaming

• SRT server for secure, low-latency encoder ingest (port 9999)
• FFmpeg-based transcoding for HLS segmentation and delivery
• Stream playlist validation (isPlaylistReady, getSegmentCount)
• Media server integration with process lifecycle management

Development Tools

• ESLint configuration for code quality

  • 4-space indentation enforcement
  • Single quote requirement
  • Strict equality enforcement
  • No var declarations
  • Unused variable detection

• Jest testing framework

  • Unit tests for database module
  • User route API tests with mocking
  • Coverage reporting (50% threshold)
  • Watch mode for development

• Nodemon for automatic restart on file changes

Documentation

• Comprehensive readme.md with installation, configuration, and API documentation
• ARCHITECTURE.md explaining system design and technology justification
• DEVELOPMENT.md with setup, workflow, and contribution guidelines
• DEPLOYMENT.md covering Docker, Docker Compose, and cloud platforms
• SECURITY.md with security policies and roadmap
• CHANGELOG.md (this file)

Configuration Files

• .eslintrc.json - Code style rules
• jest.config.js - Test configuration with coverage thresholds
• .env.example - Environment template
• .env.production.example - Production environment template
• Dockerfile - Container image definition

Package Management

• Updated package.json with:
  • Core dependencies: express, cors, morgan, mysql2, dotenv
  • Dev dependencies: eslint, jest, supertest, nodemon
  • Scripts: dev, start, test, test:watch, lint, lint:fix

CI/CD

• GitHub Actions workflow (.github/workflows/backend-tests.yml)
  • Automated linting on push/PR
  • Automated testing on push/PR
  • Coverage reporting

Changed

• Enhanced error handling with centralized error handler middleware
• Improved environment variable structure and documentation

Fixed

• (N/A - Initial release)

Security

• ⚠️ CRITICAL - Not Yet Implemented:
  • JWT authentication
  • Input validation & sanitization
  • Rate limiting
  • Password hashing
  • HTTPS enforcement

Roadmap

Know Issues

Current Limitations

1. No Authentication: All endpoints are public (security risk for production)
2. Basic Input Validation: No comprehensive validation/sanitization
3. Local Media Storage: No CDN or object storage integration
4. Single Database Connection Pool: Limited across instances
5. No Rate Limiting: Vulnerable to DDoS/abuse
6. No Error Tracking: Errors logged to console only

Workarounds

• Implement VPC/firewall rules for production
• Use reverse proxy (Nginx) for rate limiting until implemented
• Deploy behind API Gateway with authentication
• Use S3 + CloudFront for media delivery

Dependencies

Production

Development

Breaking Changes

None in current version (0.1.0).

Migration Guide

From 0.0.0 to 0.1.0

This is the initial release. No migration needed.

For existing deployments:

1. Back up database and media files
2. Update .env with new variables if needed
3. Run npm install to get new dependencies
4. Redeploy or restart container

Contributors

• FOV Development Team

License

See LICENSE file.

Format Version: 1.0
Last Updated: April 28, 2026
Document Version: 1.0