apunkt/mike
1
0
Fork 0
mirror of https://github.com/willchen96/mike.git synced 2026-06-08 20:25:13 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions
OSS AI Legal Platform
3 commits 2 branches 0 tags 16 MiB
Find a file
Metbcy eb4414092e fix(security): fail fast when download HMAC secret is missing 
Resolves the issue where getSecret() silently fell back to the literal
string "dev-secret" when neither DOWNLOAD_SIGNING_SECRET nor
SUPABASE_SECRET_KEY was set. Because the codebase is public, that
fallback let anyone forge valid /download/:token signatures against a
mis-configured deployment.

- Throw at first call instead of returning the hardcoded string, with a
  message pointing the operator at `openssl rand -hex 32`.
- Document DOWNLOAD_SIGNING_SECRET in backend/.env.example so deployers
  following the README know to set it (and that it should be distinct
  from SUPABASE_SECRET_KEY).

Closes #7
2026-05-03 00:12:44 +00:00
backend fix(security): fail fast when download HMAC secret is missing 2026-05-03 00:12:44 +00:00
frontend Add local repo contents 2026-04-29 19:49:06 +02:00
.gitignore Add local repo contents 2026-04-29 19:49:06 +02:00
LICENSE Add local repo contents 2026-04-29 19:49:06 +02:00
README.md Add local repo contents 2026-04-29 19:49:06 +02:00

README.md

Mike

Open-source release containing the Mike frontend and backend.

Contents

  • frontend/ - Next.js application
  • backend/ - Express API, Supabase access, document processing, and migrations
  • backend/migrations/000_one_shot_schema.sql - one-shot Supabase schema for fresh databases

Setup

Install dependencies:

npm install --prefix backend
npm install --prefix frontend

Create local env files from the examples:

cp backend/.env.example backend/.env
cp frontend/.env.local.example frontend/.env.local

Run backend/migrations/000_one_shot_schema.sql in the Supabase SQL editor for a fresh database.

Start the backend:

npm run dev --prefix backend

Start the frontend:

npm run dev --prefix frontend

Open http://localhost:3000.

Required Services

  • Supabase Auth and Postgres
  • S3-compatible object storage, such as Cloudflare R2
  • At least one supported model provider key, depending on which models you enable
  • LibreOffice for DOC/DOCX to PDF conversion

Checks

npm run build --prefix backend
npm run build --prefix frontend
npm run lint --prefix frontend

License

AGPL-3.0-only. See LICENSE.