Fixes in deployment and passwords

apps/backend/server.js

@@ -88,7 +88,7 @@ const sessionConfig = {
   resave: false,
   saveUninitialized: false,
   cookie: {
-    secure: process.env.NODE_ENV === 'production' || process.env.COOKIE_SECURE === 'true',
+    secure: process.env.COOKIE_SECURE !== 'false' && (process.env.NODE_ENV === 'production' || process.env.COOKIE_SECURE === 'true'),
     sameSite: 'lax',
     httpOnly: true,
     maxAge: 24 * 60 * 60 * 1000 // 24 hours

apps/parapharmacy-api/Dockerfile

@@ -30,6 +30,9 @@ ENV PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium
 # Copy package files
 COPY apps/parapharmacy-api/package*.json ./
 
+#Run npm install to avoid npm ci issues
+RUN npm install
+
 # Install dependencies from the committed lockfile (production only)
 RUN npm ci --omit=dev
 

apps/pip-platform/Dockerfile

@@ -7,11 +7,11 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
 
 WORKDIR /app
 
-COPY pyproject.toml ./
+COPY apps/pip-platform/pyproject.toml ./
 RUN pip install --no-cache-dir --upgrade pip && \
     pip install --no-cache-dir .
 
-COPY . .
+COPY apps/pip-platform/ .
 
 EXPOSE 8000
 

apps/pip-platform/pyproject.toml

@@ -62,6 +62,11 @@ plugins = ["pydantic.mypy"]
 requires = ["hatchling"]
 build-backend = "hatchling.build"
 
+[dependency-groups]
+dev = [
+    "pip-audit>=2.10.1",
+]
+
 [tool.hatch.build.targets.wheel]
 packages = ["src"]
 

apps/pip-platform/tests/unit/test_connector_sdk.py

@@ -29,7 +29,7 @@ class TestCircuitBreaker:
             return await coro
 
         import asyncio
-        result = asyncio.get_event_loop().run_until_complete(_run())
+        result = asyncio.run(_run())
         assert result == "ok"
 
     def test_open_raises_service_unavailable(self):
@@ -42,7 +42,7 @@ class TestCircuitBreaker:
 
         import asyncio
         with pytest.raises(ServiceUnavailableException):
-            asyncio.get_event_loop().run_until_complete(_run())
+            asyncio.run(_run())
 
     def test_half_open_after_recovery_timeout(self):
         cb = CircuitBreaker(name="test", failure_threshold=1, recovery_timeout=0.01)
@@ -126,7 +126,7 @@ class TestWithRetry:
             nonlocal call_count
             call_count += 1
             if call_count < 3:
-                raise Exception("temp fail")
+                raise ConnectionError("temp fail")
             return "ok"
 
         policy = RetryPolicy(max_attempts=3, base_delay=0.01, max_delay=0.1)
@@ -141,7 +141,7 @@ class TestWithRetry:
         async def _always_fail():
             nonlocal call_count
             call_count += 1
-            raise Exception("always fail")
+            raise ConnectionError("always fail")
 
         policy = RetryPolicy(max_attempts=2, base_delay=0.01, max_delay=0.1)
         with pytest.raises(Exception, match="always fail"):