How long does the integration take?

Change one base URL in an OpenAI-compatible client, or install the Python or TypeScript SDK; the quickstart routes a first request in a few minutes.

Will this lock us into another vendor?

No. The router is Apache-2.0 open source, your provider keys stay yours, and the API is OpenAI-compatible, so leaving is a change of base URL.

What happens when a provider fails?

The router falls back to the next model your policy allows and records the fallback in the trace, so an outage costs a retry, not an incident.

security - Prompt - OpenSmartRoute

Name: security
Author: 82080038

Prompt file imported from 82080038/kewer (.windsurf/workflows/security.md). Copyright stays with the author.

Security (v2.5.0)

API Security

Authentication

Session-based: Untuk web application
API Token: Untuk integrasi eksternal (Bearer token: kewer-api-token-2024)
Token harus disimpan di environment variable, bukan hardcoded

Authorization

Role-based access control (RBAC) diterapkan di API level
Permissions checked sebelum data access
User hanya dapat akses data sesuai role dan cabang

Input Validation

Semua input divalidasi di server-side
Gunakan prepared statements untuk SQL queries
Sanitasi output untuk mencegah XSS

Rate Limiting

API rate limiting: 60 requests/minute
Session timeout: 2 jam inactivity
Failed login attempt limiting

Client-Side Security

XSS Prevention

Escape semua user input sebelum render ke DOM
Gunakan jQuery text() bukan html() untuk user content
Validasi data dari API sebelum display

CSRF Protection

CSRF token untuk form submissions
Verify token pada server-side
Token regenerate per request

Sensitive Data

Jangan simpan sensitive data di localStorage
Gunakan secure cookies
Encrypt sensitive data di transit (HTTPS)

Security Testing Checklist

API Security

Test authentication dengan invalid token
Test authorization dengan different roles
Test rate limiting
Test SQL injection attempts
Test XSS attempts

Client-Side Security

Verify no sensitive data in localStorage
Check XSS vulnerabilities
Verify CSRF protection
Check for exposed API keys

Legacy Security Workflow (Optional)

1. Security Setup Checklist

CSRF protection telah diimplementasi di semua forms
Session timeout telah dikonfigurasi (2 jam)
Error handling global telah diimplementasi
Rate limiting telah diimplementasi untuk API
Input validation layer telah diimplementasi
Permission check consistency telah diperbaiki
Database indexes telah ditambahkan untuk performa

2. Security Testing

Test CSRF Protection

# Buka form dan coba submit tanpa CSRF token
# Harus mendapatkan error 403
curl -X POST http://localhost/kewer/pages/nasabah/tambah.php \
  -d "nama=test" \
  -H "Content-Type: application/x-www-form-urlencoded"
# Expected: 403 Forbidden atau error CSRF

Test Session Timeout

# Login dan tunggu 2 jam (atau ubah SESSION_LIFETIME di .env untuk testing lebih cepat)
# Setelah timeout, coba akses halaman yang butuh login
# Expected: Redirect ke login dengan pesan timeout

Test Rate Limiting

# Kirim lebih dari 60 request dalam 1 menit ke API
for i in {1..70}; do
  curl -H "Authorization: Bearer kewer-api-token-2024" \
    "http://localhost/kewer/api/alamat?action=provinces"
done
# Expected: Setelah 60 requests, mendapatkan 429 Too Many Requests

Test Permission Checks

# Login sebagai user dengan role rendah
# Coba akses halaman yang butuh permission lebih tinggi
# Expected: Redirect ke dashboard

3. Security Monitoring

Cek Error Logs

# Lihat error logs terbaru
tail -f /opt/lampp/htdocs/kewer/logs/error.log

Cek Application Logs

# Lihat application logs
tail -f /opt/lampp/htdocs/kewer/logs/app.log

Cek Audit Logs

# Lihat audit trail terbaru
echo "8208" | sudo -S /opt/lampp/bin/mysql -u root -proot kewer -e "
SELECT * FROM audit_log 
ORDER BY created_at DESC 
LIMIT 20;
"

4. Security Maintenance

Update Password untuk Production

# Ganti default passwords untuk production
# Gunakan password yang kuat (minimal 12 karakter, kombinasi huruf, angka, simbol)
# Update di database atau melalui UI user management

Update Environment Variables untuk Production

# Ubah APP_ENV dari development ke production di .env
# Matikan quick login di production
APP_ENV=production

Review Security Headers

# Cek security headers di .htaccess
# Pastikan headers berikut ada:
# - X-Frame-Options: DENY
# - X-Content-Type-Options: nosniff
# - X-XSS-Protection: 1; mode=block
# - Content-Security-Policy (opsional)

5. Database Security

Backup Database Sebelum Perubahan

cd /opt/lampp/htdocs/kewer
/opt/lampp/bin/mysqldump -u root -proot --routines --triggers kewer > database/kewer.sql
/opt/lampp/bin/mysqldump -u root -proot --routines --triggers db_alamat_simple > database/db_alamat_simple.sql
/opt/lampp/bin/mysqldump -u root -proot --routines --triggers db_orang > database/db_orang.sql

Cek Database Integrity

# Cek semua 3 database
/opt/lampp/bin/mysql -u root -proot -e "
SELECT 'kewer' as db, COUNT(*) as tables FROM information_schema.TABLES WHERE TABLE_SCHEMA='kewer'
UNION ALL SELECT 'db_alamat_simple', COUNT(*) FROM information_schema.TABLES WHERE TABLE_SCHEMA='db_alamat_simple'
UNION ALL SELECT 'db_orang', COUNT(*) FROM information_schema.TABLES WHERE TABLE_SCHEMA='db_orang';
"

6. API Security

Test API Authentication

# Test API tanpa token (harus gagal)
curl "http://localhost/kewer/api/alamat?action=provinces"
# Expected: 401 Unauthorized

# Test API dengan token (harus sukses)
curl -H "Authorization: Bearer kewer-api-token-2024" \
  "http://localhost/kewer/api/alamat?action=provinces"
# Expected: 200 OK dengan data

Test API Response Format

# Pastikan semua API response format konsisten
curl -H "Authorization: Bearer kewer-api-token-2024" \
  "http://localhost/kewer/api/alamat?action=provinces" | jq
# Expected: { "success": true, "data": [...] }

7. File Upload Security

Test File Upload Validation

# Coba upload file yang tidak diizinkan (misal: .exe, .php)
# Harus ditolak

Cek Upload Directory Permissions

# Pastikan upload directory tidak bisa dieksekusi
echo "8208" | sudo -S chmod -R 755 /opt/lampp/htdocs/kewer/uploads
echo "8208" | sudo -S chown -R daemon:daemon /opt/lampp/htdocs/kewer/uploads

8. Security Best Practices

Regular Password Changes

Ganti password admin setiap 3 bulan
Ganti password database setiap 6 bulan
Gunakan password yang berbeda untuk setiap service

Regular Security Audits

Review audit logs mingguan
Review error logs harian
Cek user access bulanan
Review permission assignments bulanan

Keep Software Updated

Update PHP ke versi terbaru yang support
Update MySQL/MariaDB ke versi terbaru
Update library dependencies (composer)

9. Security Incident Response

Jika Terdeteksi Security Breach

Segera matikan akses aplikasi
Backup database saat ini
Cek audit logs untuk aktivitas mencurigakan
Reset semua user passwords
Perbaiki vulnerability yang ditemukan
Restore dari backup yang bersih jika perlu
Dokumentasikan incident dan pembelajaran

10. Security Checklist untuk Deployment

Sebelum deploy ke production:

# Security (v2.5.0) ## API Security ### Authentication - **Session-based**: Untuk web application - **API Token**: Untuk integrasi eksternal (Bearer token: kewer-api-token-2024) - Token harus disimpan di environment variable, bukan hardcoded ### Authorization - Role-based access control (RBAC) diterapkan di API level - Permissions checked sebelum data access - User hanya dapat akses data sesuai role dan cabang ### Input Validation - Semua input divalidasi di server-side - Gunakan prepared statements untuk SQL queries - Sanitasi output untuk mencegah XSS ### Rate Limiting - API rate limiting: 60 requests/minute - Session timeout: 2 jam inactivity - Failed login attempt limiting ## Client-Side Security ### XSS Prevention - Escape semua user input sebelum render ke DOM - Gunakan jQuery text() bukan html() untuk user content - Validasi data dari API sebelum display ### CSRF Protection - CSRF token untuk form submissions - Verify token pada server-side - Token regenerate per request ### Sensitive Data - Jangan simpan sensitive data di localStorage - Gunakan secure cookies - Encrypt sensitive data di transit (HTTPS) ## Security Testing Checklist ### API Security - [ ] Test authentication dengan invalid token - [ ] Test authorization dengan different roles - [ ] Test rate limiting - [ ] Test SQL injection attempts - [ ] Test XSS attempts ### Client-Side Security - [ ] Verify no sensitive data in localStorage - [ ] Check XSS vulnerabilities - [ ] Verify CSRF protection - [ ] Check for exposed API keys ## Legacy Security Workflow (Optional) ### 1. Security Setup Checklist - [ ] CSRF protection telah diimplementasi di semua forms - [ ] Session timeout telah dikonfigurasi (2 jam) - [ ] Error handling global telah diimplementasi - [ ] Rate limiting telah diimplementasi untuk API - [ ] Input validation layer telah diimplementasi - [ ] Permission check consistency telah diperbaiki - [ ] Database indexes telah ditambahkan untuk performa ### 2. Security Testing #### Test CSRF Protection ```bash # Buka form dan coba submit tanpa CSRF token # Harus mendapatkan error 403 curl -X POST http://localhost/kewer/pages/nasabah/tambah.php \ -d "nama=test" \ -H "Content-Type: application/x-www-form-urlencoded" # Expected: 403 Forbidden atau error CSRF ``` #### Test Session Timeout ```bash # Login dan tunggu 2 jam (atau ubah SESSION_LIFETIME di .env untuk testing lebih cepat) # Setelah timeout, coba akses halaman yang butuh login # Expected: Redirect ke login dengan pesan timeout ``` #### Test Rate Limiting ```bash # Kirim lebih dari 60 request dalam 1 menit ke API for i in {1..70}; do curl -H "Authorization: Bearer kewer-api-token-2024" \ "http://localhost/kewer/api/alamat?action=provinces" done # Expected: Setelah 60 requests, mendapatkan 429 Too Many Requests ``` #### Test Permission Checks ```bash # Login sebagai user dengan role rendah # Coba akses halaman yang butuh permission lebih tinggi # Expected: Redirect ke dashboard ``` ### 3. Security Monitoring #### Cek Error Logs ```bash # Lihat error logs terbaru tail -f /opt/lampp/htdocs/kewer/logs/error.log ``` #### Cek Application Logs ```bash # Lihat application logs tail -f /opt/lampp/htdocs/kewer/logs/app.log ``` #### Cek Audit Logs ```bash # Lihat audit trail terbaru echo "8208" | sudo -S /opt/lampp/bin/mysql -u root -proot kewer -e " SELECT * FROM audit_log ORDER BY created_at DESC LIMIT 20; " ``` ### 4. Security Maintenance #### Update Password untuk Production ```bash # Ganti default passwords untuk production # Gunakan password yang kuat (minimal 12 karakter, kombinasi huruf, angka, simbol) # Update di database atau melalui UI user management ``` #### Update Environment Variables untuk Production ```bash # Ubah APP_ENV dari development ke production di .env # Matikan quick login di production APP_ENV=production ``` #### Review Security Headers ```bash # Cek security headers di .htaccess # Pastikan headers berikut ada: # - X-Frame-Options: DENY # - X-Content-Type-Options: nosniff # - X-XSS-Protection: 1; mode=block # - Content-Security-Policy (opsional) ``` ### 5. Database Security #### Backup Database Sebelum Perubahan ```bash cd /opt/lampp/htdocs/kewer /opt/lampp/bin/mysqldump -u root -proot --routines --triggers kewer > database/kewer.sql /opt/lampp/bin/mysqldump -u root -proot --routines --triggers db_alamat_simple > database/db_alamat_simple.sql /opt/lampp/bin/mysqldump -u root -proot --routines --triggers db_orang > database/db_orang.sql ``` #### Cek Database Integrity ```bash # Cek semua 3 database /opt/lampp/bin/mysql -u root -proot -e " SELECT 'kewer' as db, COUNT(*) as tables FROM information_schema.TABLES WHERE TABLE_SCHEMA='kewer' UNION ALL SELECT 'db_alamat_simple', COUNT(*) FROM information_schema.TABLES WHERE TABLE_SCHEMA='db_alamat_simple' UNION ALL SELECT 'db_orang', COUNT(*) FROM information_schema.TABLES WHERE TABLE_SCHEMA='db_orang'; " ``` ### 6. API Security #### Test API Authentication ```bash # Test API tanpa token (harus gagal) curl "http://localhost/kewer/api/alamat?action=provinces" # Expected: 401 Unauthorized # Test API dengan token (harus sukses) curl -H "Authorization: Bearer kewer-api-token-2024" \ "http://localhost/kewer/api/alamat?action=provinces" # Expected: 200 OK dengan data ``` #### Test API Response Format ```bash # Pastikan semua API response format konsisten curl -H "Authorization: Bearer kewer-api-token-2024" \ "http://localhost/kewer/api/alamat?action=provinces" | jq # Expected: { "success": true, "data": [...] } ``` ### 7. File Upload Security #### Test File Upload Validation ```bash # Coba upload file yang tidak diizinkan (misal: .exe, .php) # Harus ditolak ``` #### Cek Upload Directory Permissions ```bash # Pastikan upload directory tidak bisa dieksekusi echo "8208" | sudo -S chmod -R 755 /opt/lampp/htdocs/kewer/uploads echo "8208" | sudo -S chown -R daemon:daemon /opt/lampp/htdocs/kewer/uploads ``` ### 8. Security Best Practices #### Regular Password Changes - Ganti password admin setiap 3 bulan - Ganti password database setiap 6 bulan - Gunakan password yang berbeda untuk setiap service #### Regular Security Audits - Review audit logs mingguan - Review error logs harian - Cek user access bulanan - Review permission assignments bulanan #### Keep Software Updated - Update PHP ke versi terbaru yang support - Update MySQL/MariaDB ke versi terbaru - Update library dependencies (composer) ### 9. Security Incident Response #### Jika Terdeteksi Security Breach 1. Segera matikan akses aplikasi 2. Backup database saat ini 3. Cek audit logs untuk aktivitas mencurigakan 4. Reset semua user passwords 5. Perbaiki vulnerability yang ditemukan 6. Restore dari backup yang bersih jika perlu 7. Dokumentasikan incident dan pembelajaran ### 10. Security Checklist untuk Deployment Sebelum deploy ke production: - [ ] APP_ENV diubah ke production - [ ] Quick login dimatikan - [ ] Default passwords diganti - [ ] Database backup terbaru dibuat - [ ] Security headers dikonfigurasi - [ ] File upload permissions di-set dengan benar - [ ] Error logging diaktifkan - [ ] Rate limiting diaktifkan - [ ] SSL/TLS diaktifkan (jika HTTPS) - [ ] Firewall dikonfigurasi - [ ] Regular backup schedule di-set

{ "prompt": "# Security (v2.5.0)\n\n## API Security\n\n### Authentication\n- **Session-based**: Untuk web application\n- **API Token**: Untuk integrasi eksternal (Bearer token: kewer-api-token-2024)\n- Token harus disimpan di environment variable, bukan hardcoded\n\n### Authorization\n- Role-based access control (RBAC) diterapkan di API level\n- Permissions checked sebelum data access\n- User hanya dapat akses data sesuai role dan cabang\n\n### Input Validation\n- Semua input divalidasi di server-side\n- Gunakan prepared statements untuk SQL queries\n- Sanitasi output untuk mencegah XSS\n\n### Rate Limiting\n- API rate limiting: 60 requests/minute\n- Session timeout: 2 jam inactivity\n- Failed login attempt limiting\n\n## Client-Side Security\n\n### XSS Prevention\n- Escape semua user input sebelum render ke DOM\n- Gunakan jQuery text() bukan html() untuk user content\n- Validasi data dari API sebelum display\n\n### CSRF Protection\n- CSRF token untuk form submissions\n- Verify token pada server-side\n- Token regenerate per request\n\n### Sensitive Data\n- Jangan simpan sensitive data di localStorage\n- Gunakan secure cookies\n- Encrypt sensitive data di transit (HTTPS)\n\n## Security Testing Checklist\n\n### API Security\n- [ ] Test authentication dengan invalid token\n- [ ] Test authorization dengan different roles\n- [ ] Test rate limiting\n- [ ] Test SQL injection attempts\n- [ ] Test XSS attempts\n\n### Client-Side Security\n- [ ] Verify no sensitive data in localStorage\n- [ ] Check XSS vulnerabilities\n- [ ] Verify CSRF protection\n- [ ] Check for exposed API keys\n\n## Legacy Security Workflow (Optional)\n\n### 1. Security Setup Checklist\n- [ ] CSRF protection telah diimplementasi di semua forms\n- [ ] Session timeout telah dikonfigurasi (2 jam)\n- [ ] Error handling global telah diimplementasi\n- [ ] Rate limiting telah diimplementasi untuk API\n- [ ] Input validation layer telah diimplementasi\n- [ ] Permission check consistency telah diperbaiki\n- [ ] Database indexes telah ditambahkan untuk performa\n\n### 2. Security Testing\n\n#### Test CSRF Protection\n```bash\n# Buka form dan coba submit tanpa CSRF token\n# Harus mendapatkan error 403\ncurl -X POST http://localhost/kewer/pages/nasabah/tambah.php \\\n -d \"nama=test\" \\\n -H \"Content-Type: application/x-www-form-urlencoded\"\n# Expected: 403 Forbidden atau error CSRF\n```\n\n#### Test Session Timeout\n```bash\n# Login dan tunggu 2 jam (atau ubah SESSION_LIFETIME di .env untuk testing lebih cepat)\n# Setelah timeout, coba akses halaman yang butuh login\n# Expected: Redirect ke login dengan pesan timeout\n```\n\n#### Test Rate Limiting\n```bash\n# Kirim lebih dari 60 request dalam 1 menit ke API\nfor i in {1..70}; do\n curl -H \"Authorization: Bearer kewer-api-token-2024\" \\\n \"http://localhost/kewer/api/alamat?action=provinces\"\ndone\n# Expected: Setelah 60 requests, mendapatkan 429 Too Many Requests\n```\n\n#### Test Permission Checks\n```bash\n# Login sebagai user dengan role rendah\n# Coba akses halaman yang butuh permission lebih tinggi\n# Expected: Redirect ke dashboard\n```\n\n### 3. Security Monitoring\n\n#### Cek Error Logs\n```bash\n# Lihat error logs terbaru\ntail -f /opt/lampp/htdocs/kewer/logs/error.log\n```\n\n#### Cek Application Logs\n```bash\n# Lihat application logs\ntail -f /opt/lampp/htdocs/kewer/logs/app.log\n```\n\n#### Cek Audit Logs\n```bash\n# Lihat audit trail terbaru\necho \"8208\" | sudo -S /opt/lampp/bin/mysql -u root -proot kewer -e \"\nSELECT * FROM audit_log \nORDER BY created_at DESC \nLIMIT 20;\n\"\n```\n\n### 4. Security Maintenance\n\n#### Update Password untuk Production\n```bash\n# Ganti default passwords untuk production\n# Gunakan password yang kuat (minimal 12 karakter, kombinasi huruf, angka, simbol)\n# Update di database atau melalui UI user management\n```\n\n#### Update Environment Variables untuk Production\n```bash\n# Ubah APP_ENV dari development ke production di .env\n# Matikan quick login di production\nAPP_ENV=production\n```\n\n#### Review Security Headers\n```bash\n# Cek security headers di .htaccess\n# Pastikan headers berikut ada:\n# - X-Frame-Options: DENY\n# - X-Content-Type-Options: nosniff\n# - X-XSS-Protection: 1; mode=block\n# - Content-Security-Policy (opsional)\n```\n\n### 5. Database Security\n\n#### Backup Database Sebelum Perubahan\n```bash\ncd /opt/lampp/htdocs/kewer\n/opt/lampp/bin/mysqldump -u root -proot --routines --triggers kewer > database/kewer.sql\n/opt/lampp/bin/mysqldump -u root -proot --routines --triggers db_alamat_simple > database/db_alamat_simple.sql\n/opt/lampp/bin/mysqldump -u root -proot --routines --triggers db_orang > database/db_orang.sql\n```\n\n#### Cek Database Integrity\n```bash\n# Cek semua 3 database\n/opt/lampp/bin/mysql -u root -proot -e \"\nSELECT 'kewer' as db, COUNT(*) as tables FROM information_schema.TABLES WHERE TABLE_SCHEMA='kewer'\nUNION ALL SELECT 'db_alamat_simple', COUNT(*) FROM information_schema.TABLES WHERE TABLE_SCHEMA='db_alamat_simple'\nUNION ALL SELECT 'db_orang', COUNT(*) FROM information_schema.TABLES WHERE TABLE_SCHEMA='db_orang';\n\"\n```\n\n### 6. API Security\n\n#### Test API Authentication\n```bash\n# Test API tanpa token (harus gagal)\ncurl \"http://localhost/kewer/api/alamat?action=provinces\"\n# Expected: 401 Unauthorized\n\n# Test API dengan token (harus sukses)\ncurl -H \"Authorization: Bearer kewer-api-token-2024\" \\\n \"http://localhost/kewer/api/alamat?action=provinces\"\n# Expected: 200 OK dengan data\n```\n\n#### Test API Response Format\n```bash\n# Pastikan semua API response format konsisten\ncurl -H \"Authorization: Bearer kewer-api-token-2024\" \\\n \"http://localhost/kewer/api/alamat?action=provinces\" | jq\n# Expected: { \"success\": true, \"data\": [...] }\n```\n\n### 7. File Upload Security\n\n#### Test File Upload Validation\n```bash\n# Coba upload file yang tidak diizinkan (misal: .exe, .php)\n# Harus ditolak\n```\n\n#### Cek Upload Directory Permissions\n```bash\n# Pastikan upload directory tidak bisa dieksekusi\necho \"8208\" | sudo -S chmod -R 755 /opt/lampp/htdocs/kewer/uploads\necho \"8208\" | sudo -S chown -R daemon:daemon /opt/lampp/htdocs/kewer/uploads\n```\n\n### 8. Security Best Practices\n\n#### Regular Password Changes\n- Ganti password admin setiap 3 bulan\n- Ganti password database setiap 6 bulan\n- Gunakan password yang berbeda untuk setiap service\n\n#### Regular Security Audits\n- Review audit logs mingguan\n- Review error logs harian\n- Cek user access bulanan\n- Review permission assignments bulanan\n\n#### Keep Software Updated\n- Update PHP ke versi terbaru yang support\n- Update MySQL/MariaDB ke versi terbaru\n- Update library dependencies (composer)\n\n### 9. Security Incident Response\n\n#### Jika Terdeteksi Security Breach\n1. Segera matikan akses aplikasi\n2. Backup database saat ini\n3. Cek audit logs untuk aktivitas mencurigakan\n4. Reset semua user passwords\n5. Perbaiki vulnerability yang ditemukan\n6. Restore dari backup yang bersih jika perlu\n7. Dokumentasikan incident dan pembelajaran\n\n### 10. Security Checklist untuk Deployment\n\nSebelum deploy ke production:\n- [ ] APP_ENV diubah ke production\n- [ ] Quick login dimatikan\n- [ ] Default passwords diganti\n- [ ] Database backup terbaru dibuat\n- [ ] Security headers dikonfigurasi\n- [ ] File upload permissions di-set dengan benar\n- [ ] Error logging diaktifkan\n- [ ] Rate limiting diaktifkan\n- [ ] SSL/TLS diaktifkan (jika HTTPS)\n- [ ] Firewall dikonfigurasi\n- [ ] Regular backup schedule di-set", "variables": [], "notes": "Security improvements dan maintenance untuk aplikasi Kewer v2.5.0", "metadata": { "source": { "provider": "github-windsurf-workflows", "repository": "https://github.com/82080038/kewer", "path": ".windsurf/workflows/security.md", "ref": "60e6ee325bd65316c50d6e984419ee1c948f7290", "url": "https://github.com/82080038/kewer/blob/60e6ee325bd65316c50d6e984419ee1c948f7290/.windsurf/workflows/security.md", "key": "82080038/kewer/.windsurf/workflows/security.md" } } }

About

Security (v2.5.0)

API Security

Authentication

Authorization

Input Validation

Rate Limiting

Client-Side Security

XSS Prevention

CSRF Protection

Sensitive Data

Security Testing Checklist

API Security

Client-Side Security

Legacy Security Workflow (Optional)

1. Security Setup Checklist

2. Security Testing

Test CSRF Protection

Test Session Timeout

Test Rate Limiting

Test Permission Checks

3. Security Monitoring

Cek Error Logs

Cek Application Logs

Cek Audit Logs

4. Security Maintenance

Update Password untuk Production

Update Environment Variables untuk Production

Review Security Headers

5. Database Security

Backup Database Sebelum Perubahan

Cek Database Integrity

6. API Security

Test API Authentication

Test API Response Format

7. File Upload Security

Test File Upload Validation

Cek Upload Directory Permissions

8. Security Best Practices

Regular Password Changes

Regular Security Audits

Keep Software Updated

9. Security Incident Response

Jika Terdeteksi Security Breach

10. Security Checklist untuk Deployment

Install security and it becomes one more candidate the router can pick - when it fits.

What it costs to adopt - in engineering time.

One base URL

No vendor lock-in

Failover built in

Use it

Manifest

Reviews