mawfia / infs-740-project Goto Github PK

Project for INFS 740 taught by Dr. Alexander Brodsky
M. Andrew Williams
Created: 21 September 2021
Updated: 16 November 2021
Scheduled Release Date: 14 December 2021

This is a MongoDB, Express.js, Angular 8, Node.js, Socket.io application. This application is also best viewed on desktop with mobile device awareness that will gradually become more PWA friendly.

**Still under construction, distributed systems features covered during INFS 740 will be implemented as the course progresses.**

As of 8 Nov the following features are fully functional in the staging environment:

• User account CRUD - CR 100%, (No current plan for update or delete).
• Bicycle listing CRUD - CRU 100%, (Delete is forthcoming).
• Bidding - user created bicycles can be in one of three states:
• Inactive - bicycle created by user that can be updated or deleted. Not viewable by other users or posted in active listing section.
  • Must have an image
  • Must have a title
  • Must have a description
  • Must have city and state for location
  • Must have minimum closing price (amount that must be matched in order to win auction)
  • Must have a starting price (minimum amount in order to bid for bicycle)
• Active - bicycle listed on main page with the following requirements:
  • Auction closing date is a future date and time of: 90 days or less.
  • Minimum closing price is within pre-defined limits.
  • Starting price is within pre-defined limits.
  • Only title and description may be updated when in active status.
  • All users may bid on bicycles EXCEPT their own listings.
  • All logged in users can see updates to active listings in real-time.
  • Active listings revert to "inactive" status if minimum closing price is not matched or exceeded by closing date and time of auction.
• Accession - bicycle listing ended and auction bidding matches or exceeds the minimum closing price. Bicycles in this status are only viewable to the winner.

The following security features are fully functional in the development environment and are currently being tested in the staging environment:

1. All routes (canonical URLS and endpoints) are only accessible by authorization and authentication.
2. NoSQL Injection countermeasures
3. Buffer overflow countermeasures
4. Event Logging and automated monitoring
5. CORS prevention
6. CSRF/XSRF countermeasures
7. XSS countermeasures
8. Session Fixation countermeasures
9. TOCTOU Race Conditions
10. Stronger Salt/Hash algorithm (if time allows)

Project requirements here:

Production environment contains a prototype application allowing users to create, view, update, auction, or bid on bicycle listings. Wireframes depict 'how to use' and will eventually be updated to show bidding procedures. Login with "[email protected]", password "!QAZzaq1" or create your own account.

Production environment application may be viewed at: https://mawfia.eastus.cloudapp.azure.com/

Current Maintainer:

• M. Andrew Williams

This is an INFS 740 project proposed to and approved by Dr. Alexander Brodsky.