feat: harden demo security and add full test suite

1 files changed, 12 insertions, 1 deletions

diff --git a/package.json b/package.json
index d9f57ef..600ef03 100644
--- a/package.json
+++ b/package.json
@@ -5,7 +5,8 @@
   "description": "",
   "type": "module",
   "scripts": {
-    "test": "vitest run --passWithNoTests",
+    "test": "vitest run",
+    "test:coverage": "vitest run --coverage.enabled",
     "dev:frontend": "vite",
     "build:backend": "tsc -p tsconfig.json",
     "build:backend:watch": "tsc -p tsconfig.json --watch",
@@ -31,24 +32,32 @@
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",
+    "@testing-library/jest-dom": "^6.9.1",
+    "@testing-library/react": "^16.3.2",
+    "@testing-library/user-event": "^14.6.1",
     "@types/dotenv": "^6.1.1",
     "@types/express": "^5.0.6",
     "@types/node": "^25.9.1",
     "@types/qrcode": "^1.5.6",
     "@types/react": "^19.2.15",
     "@types/react-dom": "^19.2.3",
+    "@types/supertest": "^7.2.0",
     "@typescript-eslint/eslint-plugin": "^8.59.4",
     "@typescript-eslint/parser": "^8.59.4",
     "@vitejs/plugin-react": "^6.0.2",
+    "@vitest/coverage-v8": "^4.1.7",
     "eslint": "^10.4.0",
     "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-prettier": "^5.5.5",
     "eslint-plugin-react-hooks": "^7.1.1",
     "eslint-plugin-react-refresh": "^0.5.2",
     "globals": "^17.6.0",
+    "jsdom": "^29.1.1",
+    "light-my-request": "^6.6.0",
     "nodemon": "^3.1.14",
     "npm-run-all": "^4.1.5",
     "prettier": "^3.8.3",
+    "supertest": "^7.2.2",
     "ts-node": "^10.9.2",
     "typescript": "^6.0.3",
     "vite": "^8.0.14",
@@ -58,6 +67,8 @@
     "digiid-ts": "^3.0.0",
     "dotenv": "^17.4.2",
     "express": "^5.2.1",
+    "express-rate-limit": "^8.5.2",
+    "helmet": "^8.2.0",
     "qrcode": "^1.5.3",
     "react": "^19.2.6",
     "react-dom": "^19.2.6"