From a1719408d3265fd2a97ff879a6f749e7ef18fc44 Mon Sep 17 00:00:00 2001
From: Jeet Debnath <jeet.debnath2004@gmail.com>
Date: Tue, 24 Mar 2026 11:47:02 +0530
Subject: [PATCH] added mongo auth

---
 .claude/settings.local.json                |   3 ++-
 backend/__pycache__/config.cpython-312.pyc | Bin 1136 -> 1065 bytes
 backend/config.py                          |  10 ++++++----
 docker-compose.yml                         |   7 +++++--
 4 files changed, 13 insertions(+), 7 deletions(-)

diff --git a/.claude/settings.local.json b/.claude/settings.local.json
index 3dace0d..472f475 100644
--- a/.claude/settings.local.json
+++ b/.claude/settings.local.json
@@ -10,7 +10,8 @@
       "Bash(pip3 install:*)",
       "Bash(/Users/jeet/Library/Python/3.9/bin/pytest -v 2>&1)",
       "Bash(conda run:*)",
-      "Bash(git rm:*)"
+      "Bash(git rm:*)",
+      "Bash(git remote:*)"
     ]
   }
 }
diff --git a/backend/__pycache__/config.cpython-312.pyc b/backend/__pycache__/config.cpython-312.pyc
index 951586a21ef52a004d4e91bbce445d2eb8304c74..249281cea1026443c8332831566274227978e371 100644
GIT binary patch
delta 545
zcmeysv66%DG%qg~0}w3II+W?dG?7oDJ^;v@&XB^8!kEL5%NWI&%M``L2;wv4Fz2#F
zu`n_)F}O3NFt;$Iu%t4sW(MhIV2EO6Vn}6K4dF1Pu(mM3*imeiY?|yZK{A?5w|JZq
zi&KMBOG+~H(u;2i!C21ud1;yHE}6+C6MLm5%5pMhP23nRk;<LIox+pCyM_;L4NoP%
zrod!5#>IkFEPAPVWp20FGSl<&i&8b2CmS$Haou7~ttcr<^wZ>>%)_L@RKzj)ER&Qr
z$cshXK;jm2W?o4VFNn(rB3M9TJh}NPsX6h<U^h(mVsaKJVh2fr2v#62cAu=wY%cXs
zSoMaW_ziKH8+>A4*jYr_8hwhS!RjVwGh5b!wMc>ZU_lum>lROXYDs)C)VD=)Kp|lu
zE(STLf#C_aaJSV37E!QzKTY;qf(4Z+iFqZN$p|f=(1kdXGp#f)xg<Y7r??2@CWs3`
zCKf^L3<5Dhmj2?f0s5yjC)KV<5y)i(;$mGO@qw9<k?}r*-CYLxFKpb5Y#lXU7=YAA
Y83rcqX6cVijErKRnHiXP!7Q+w0D>@m{{R30

delta 649
zcmYjOO>5Lp6us{w>5P;4vd%aabX>TJU{``4NEa4#q0GjG5QGqtbQ;Jc@{%b`6~@IZ
zDy~Wv{Q)jS=9h?2+*tzMxe;7cEeKtCZ<C;boOjQ=@0@$N_hap(*81FRUI6@FeEkp{
zvi;Uz{uJ2(c;K-RCd^`tVjl8|uml4RkHHfQ@TAX{f|LN3<lu{CLBP`%P{o!u)6JFd
zlrdRuJaiKOnV+UXG)|D$Lp8Ns$KCebQj3QHAWQapd;in(KGthsJ!8p>YpXG9nyu_E
zd;jD=833zPmoPX0A1vm9#XV*Tk6UskOnKI>s;_Ux(N-|tmFs@A^JrvhS%=@qey}Uq
zE513;^&+j>XoU?yLa>0N)wR9a(b~1QE!D>hH9#1dhUyUM5?mx$LC8gts=RI6P87wd
zlLm2=*tV)uo(7(aAW9Y4swM$hsUATeE+gU(O0Ph}Alb+c`JL_`$+h7xKqz|9v!S>*
zKYv-uOLcCH{nSp%ajUCnK`ka!{SAC;tiHSdMfT23My8&3U(P%yN(1+wgw~tax2BPs
z#&MV^+Dp+BnN{6Vx!cIkY7Zu{Hx2y_bsZ_KBe{ieA{b-GaPt_3r+S?Y_g<d@9zO?J
JNA@Jm@h^6gh*JOn

diff --git a/backend/config.py b/backend/config.py
index b6af407..162a936 100644
--- a/backend/config.py
+++ b/backend/config.py
@@ -1,4 +1,4 @@
-from pydantic_settings import BaseSettings # type: ignore
+from pydantic_settings import BaseSettings, SettingsConfigDict  # type: ignore
 from functools import lru_cache
 
 
@@ -9,9 +9,11 @@ class Settings(BaseSettings):
     environment: str = "development"
     frontend_url: str = "http://localhost:8000"
 
-    class Config:
-        env_file = ".env"
-        case_sensitive = False
+    model_config = SettingsConfigDict(
+        env_file=".env",
+        case_sensitive=False,
+        extra="ignore",  # ignore unknown env vars (e.g. VITE_* from root .env)
+    )
 
 
 @lru_cache()
diff --git a/docker-compose.yml b/docker-compose.yml
index 759bc10..950406f 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -37,11 +37,14 @@ services:
 
   mongo:
     image: mongo:6
-    command: ["mongod", "--bind_ip", "0.0.0.0"]
+    command: ["mongod", "--bind_ip", "0.0.0.0", "--auth"]
+    environment:
+      MONGO_INITDB_ROOT_USERNAME: ${MONGO_USERNAME}
+      MONGO_INITDB_ROOT_PASSWORD: ${MONGO_PASSWORD}
     volumes:
       - mongo_data:/data/db
     healthcheck:
-      test: ["CMD", "mongosh", "--quiet", "--eval", "db.adminCommand('ping').ok"]
+      test: ["CMD", "mongosh", "--quiet", "-u", "${MONGO_USERNAME}", "-p", "${MONGO_PASSWORD}", "--authenticationDatabase", "admin", "--eval", "db.adminCommand('ping').ok"]
       interval: 10s
       timeout: 5s
       retries: 5