feat(monitoring): integrate Sentry for frontend and backend error tracking (#879)

Author: diksha78dev

backend/app.py

@@ -124,6 +124,37 @@
 # This will raise ValueError if any required variables are missing
 validate_required_env_vars()
 
+# =====================================================================
+# SECURITY COMPLIANCE UPDATE: SENTRY ERROR MONITORING
+# =====================================================================
+import sentry_sdk
+from sentry_sdk.integrations.flask import FlaskIntegration
+
+sentry_dsn = os.getenv('SENTRY_DSN')
+if sentry_dsn:
+    def strip_sensitive_data(event, hint):
+        # Scrub sensitive data from request data before sending to Sentry
+        if 'request' in event:
+            request_data = event['request']
+            if 'headers' in request_data:
+                for key in ['Authorization', 'Cookie', 'X-CSRF-Token']:
+                    if key in request_data['headers'] or key.lower() in request_data['headers']:
+                        request_data['headers'][key] = '[Filtered]'
+                        request_data['headers'][key.lower()] = '[Filtered]'
+            if 'data' in request_data and isinstance(request_data['data'], dict):
+                for key in ['password', 'token', 'secret']:
+                    if key in request_data['data']:
+                        request_data['data'][key] = '[Filtered]'
+        return event
+
+    sentry_sdk.init(
+        dsn=sentry_dsn,
+        integrations=[FlaskIntegration()],
+        traces_sample_rate=1.0,
+        before_send=strip_sensitive_data,
+        environment=env
+    )
+
 # Apply configuration to Flask app
 app.config.update(app_config.flask_config)
 
@@ -358,6 +389,15 @@ def handle_unhandled_exception(e):
         tuple: A Flask JSON response object and an HTTP status code.
     """
 
+    # Capture in Sentry if it's not a standard HTTP exception
+    if not isinstance(e, HTTPException):
+        try:
+            import sentry_sdk
+            if os.getenv('SENTRY_DSN'):
+                sentry_sdk.capture_exception(e)
+        except ImportError:
+            pass
+
     # 1. Handle HTTP Exceptions Normally
     # If the exception is an intentional HTTP error (e.g., abort(404)),
     # we should return its intended status code and message, assuming it's
@@ -517,6 +557,13 @@ def handle_sqlalchemy_exception(e):
     Dedicated handler for database-related exceptions to prevent SQL injection
     reconnaissance and schema leakage.
     """
+    try:
+        import sentry_sdk
+        if os.getenv('SENTRY_DSN'):
+            sentry_sdk.capture_exception(e)
+    except ImportError:
+        pass
+
     # 1. Ensure the session is rolled back safely
     try:
         db.session.rollback()

backend/requirements.txt

@@ -100,3 +100,36 @@ if (typeof module !== 'undefined' && module.exports) {
     module.exports = CONFIG;
 }
 
+// =====================================================================
+// SECURITY COMPLIANCE UPDATE: SENTRY ERROR MONITORING
+// =====================================================================
+(function() {
+    const dsn = window.SENTRY_FRONTEND_DSN || (typeof localStorage !== 'undefined' ? localStorage.getItem('SENTRY_FRONTEND_DSN') : '');
+    if (dsn) {
+        const script = document.createElement('script');
+        script.src = 'https://browser.sentry-cdn.com/7.60.0/bundle.min.js';
+        script.crossOrigin = 'anonymous';
+        script.onload = () => {
+            if (typeof Sentry !== 'undefined') {
+                Sentry.init({
+                    dsn: dsn,
+                    tracesSampleRate: 1.0,
+                    beforeSend(event) {
+                        // Scrub sensitive data from request data
+                        if (event.request && event.request.data) {
+                            try {
+                                let data = typeof event.request.data === 'string' ? JSON.parse(event.request.data) : event.request.data;
+                                ['password', 'token', 'secret'].forEach(key => {
+                                    if (data[key]) data[key] = '[Filtered]';
+                                });
+                                event.request.data = typeof event.request.data === 'string' ? JSON.stringify(data) : data;
+                            } catch (e) {}
+                        }
+                        return event;
+                    }
+                });
+            }
+        };
+        document.head.appendChild(script);
+    }
+})();