HIGH: Auth service missing redis dependency in package.json - crashes at runtime

[Senthil455]

Summary

The auth service requires redis but does not list it in package.json dependencies. This will throw MODULE_NOT_FOUND at runtime.

Affected File

services/auth-service/package.json

Root Cause

The code at services/auth-service/index.js:13 does:

const redis = require('redis');

But redis is not listed in dependencies or devDependencies in package.json. When the service starts, Node.js cannot find the module and throws:

Error: Cannot find module 'redis'

Impact

• The auth service fails to start
• All authentication operations that use Redis (session caching, rate limiting, WebAuthn challenge storage) are unavailable
• The entire application is inaccessible since auth is a critical dependency

Fix Required

Add redis to package.json dependencies:

"dependencies": {
    ...
    "redis": "^4.6.0",
    ...
}

[Senthil455]

Fixed in PR #116 - Added redis@^4.6.0 to auth-service/package.json