Description
The application logs sensitive debug information (user IDs, request details, database queries) directly to console in production environment.
Current Issue
Files like db.js, server.js, and aiController.js use console.log() without checking environment. This exposes authentication tokens, user data, and system internals.
Proposed Improvement
Implement structured logging with Winston logger (already in dependencies)
Add environment-based logging levels (debug for development, error/warn for production)
Remove all direct console.log statements
Implement log rotation and centralized logging (e.g., to file or monitoring service)
Expected Outcomes
Improved security with no sensitive data leakage
Better debugging capability in production via structured logs
Compliance with security best practices
Please assign me under Gssoc'26
Description
The application logs sensitive debug information (user IDs, request details, database queries) directly to console in production environment.
Current Issue
Files like db.js, server.js, and aiController.js use console.log() without checking environment. This exposes authentication tokens, user data, and system internals.
Proposed Improvement
Implement structured logging with Winston logger (already in dependencies)
Add environment-based logging levels (debug for development, error/warn for production)
Remove all direct console.log statements
Implement log rotation and centralized logging (e.g., to file or monitoring service)
Expected Outcomes
Improved security with no sensitive data leakage
Better debugging capability in production via structured logs
Compliance with security best practices
Please assign me under Gssoc'26