procurement-ingest/lambdas/wo
Adam Moussa 2802d04368
Add TTL to web UI auth token cache for rotation
The web-ui handlers cached the Secrets Manager auth token at module
level with no expiry, so a rotated secret was only picked up when the
warm container recycled — an emergency rotation could take hours to
take effect. Cache the fetched value for a 5-minute TTL instead, so a
rotated token propagates within the TTL while still avoiding a Secrets
Manager call on every request. Still fails closed when the secret is
unset or unreadable.

Refs: INFRA-74
2026-07-15 19:33:16 -04:00
..
email_processor Require Secrets Manager key for Anthropic client 2026-07-15 19:29:41 -04:00
web_ui Add TTL to web UI auth token cache for rotation 2026-07-15 19:33:16 -04:00