Update INVESTIGATION.md with completed improvements

- Mark BUG-059 as N/A (MockRedis is sufficient for actual usage)
- Update improvement suggestions to reflect completed fixes:
  - Retry logic (BUG-015)
  - Health checks (BUG-043)
  - Rate limiting (BUG-030)
  - CSRF protection (BUG-049)
  - Resource limits (BUG-067)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
mruwnik 2025-12-19 21:45:03 +00:00
parent 92220f8abc
commit be3963b02f

View File

@ -368,7 +368,7 @@ Based on git history analysis, the following bugs have been FIXED:
- BUG-056: ✅ Unused "appuser" in Dockerfile - FIXED (removed unused user creation) - BUG-056: ✅ Unused "appuser" in Dockerfile - FIXED (removed unused user creation)
- BUG-057: ✅ Build dependencies not cleaned up - FIXED (added apt-get purge after pip install in Dockerfile) - BUG-057: ✅ Build dependencies not cleaned up - FIXED (added apt-get purge after pip install in Dockerfile)
- BUG-058: N/A Typos in log messages - no log messages found at referenced location - BUG-058: N/A Typos in log messages - no log messages found at referenced location
- BUG-059: MockRedis overly simplistic (`tests/conftest.py:24-46`) - BUG-059: N/A MockRedis - actually sufficient (implements get/set/scan_iter which are the only Redis methods used)
- BUG-060: ✅ Print statement in ebook.py:192 - FIXED (changed to logger.debug) - BUG-060: ✅ Print statement in ebook.py:192 - FIXED (changed to logger.debug)
--- ---
@ -376,12 +376,12 @@ Based on git history analysis, the following bugs have been FIXED:
## Improvement Suggestions ## Improvement Suggestions
### High Priority ### High Priority
1. **Implement proper retry logic** for all Celery tasks with exponential backoff 1. ~~**Implement proper retry logic** for all Celery tasks~~ ✅ DONE (BUG-015)
2. **Add comprehensive health checks** that validate all service dependencies 2. ~~**Add comprehensive health checks**~~ ✅ DONE (BUG-043)
3. **Fix score aggregation** to use mean/max instead of sum 3. **Fix score aggregation** to use mean/max instead of sum
4. **Add rate limiting** to prevent DoS attacks 4. ~~**Add rate limiting**~~ ✅ DONE (BUG-030)
5. **Implement proper CSRF protection** for OAuth flows 5. ~~**Implement proper CSRF protection**~~ ✅ Already present (BUG-049)
6. **Add resource limits** to all Docker services 6. ~~**Add resource limits** to all Docker services~~ ✅ DONE (BUG-067)
7. **Implement centralized logging** with ELK or Grafana Loki 7. **Implement centralized logging** with ELK or Grafana Loki
### Medium Priority ### Medium Priority