Skip to content

feat(backend): JWT authentication, gas monitoring, and log aggregation - #1430

Merged
joelpeace48-cell merged 1 commit into
FinesseStudioLab:mainfrom
Jayy4rl:feat/backend-jwt-tracing-gas-logs
Oct 20, 2026
Merged

joelpeace48-cell merged 1 commit into
FinesseStudioLab:mainfrom
Jayy4rl:feat/backend-jwt-tracing-gas-logs

Conversation

@Jayy4rl

@Jayy4rl Jayy4rl commented Oct 20, 2026

Copy link
Copy Markdown
Contributor

Implements four backend features for improved security, observability, and monitoring:

  1. JWT Authentication Service for Operator Portal (Closes feat(backend): JWT authentication service for operator portal with refresh token rotation #1253)

    • JWT token creation with 15-min access, 7-day refresh token
    • HTTP-only cookie-based refresh token rotation
    • Middleware for protected routes
    • New endpoints: POST /operator/login|refresh|logout, GET /operator/profile
  2. OpenTelemetry Tracing Instrumentation (Closes feat(backend): Add OpenTelemetry tracing instrumentation across HTTP routes #1265)

    • Already implemented in tracing.js, integrated into startup
    • HTTP, Express, and custom span instrumentation
    • OTLP exporter for Jaeger/Zipkin
    • W3C Trace Context propagation
  3. On-Chain Transaction Gas Cost Monitoring Worker (Closes feat(backend): On-chain transaction gas cost monitoring worker #1266)

    • Record and aggregate XLM gas fees by contract/method
    • Database schema with SQLite/PostgreSQL support
    • Configurable retention and aggregation periods
    • Tracing integration for observability
  4. Centralized Log Aggregation with Loki/Promtail (Closes infra(logs): Centralized log aggregation with Loki and Promtail #1346)

    • Docker Compose stack with Loki, Promtail, Grafana
    • Fire-and-forget log push middleware
    • Query and statistics endpoints
    • Health check monitoring

All implementations use minimal viable functionality as requested.

Implements four backend features for improved security, observability, and monitoring:

1. JWT Authentication Service for Operator Portal (FinesseStudioLab#1253)
   - JWT token creation with 15-min access, 7-day refresh token
   - HTTP-only cookie-based refresh token rotation
   - Middleware for protected routes
   - New endpoints: POST /operator/login|refresh|logout, GET /operator/profile

2. OpenTelemetry Tracing Instrumentation (FinesseStudioLab#1265)
   - Already implemented in tracing.js, integrated into startup
   - HTTP, Express, and custom span instrumentation
   - OTLP exporter for Jaeger/Zipkin
   - W3C Trace Context propagation

3. On-Chain Transaction Gas Cost Monitoring Worker (FinesseStudioLab#1266)
   - Record and aggregate XLM gas fees by contract/method
   - Database schema with SQLite/PostgreSQL support
   - Configurable retention and aggregation periods
   - Tracing integration for observability

4. Centralized Log Aggregation with Loki/Promtail (FinesseStudioLab#1346)
   - Docker Compose stack with Loki, Promtail, Grafana
   - Fire-and-forget log push middleware
   - Query and statistics endpoints
   - Health check monitoring

All implementations use minimal viable functionality as requested.
@drips-wave

drips-wave Bot commented Oct 20, 2026

Copy link
Copy Markdown

@Jayy4rl Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

/**
* GET /operator/profile - Get operator profile (protected)
*/
app.get('/operator/profile', jwtMiddleware, (req, res) => {
@joelpeace48-cell
joelpeace48-cell merged commit 75abe8d into FinesseStudioLab:main Oct 20, 2026
8 of 27 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

4 participants