adam/proposal-system
1
0
Fork 0
mirror of https://github.com/Sea-Haven-Industries/proposal-system.git synced 2026-10-07 02:22:02 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix(api): log user id instead of email on cognito role sync (SEC-29)

Browse source 
Keep AuthResponse.Email unchanged so CodeQL alert 1 closes without altering the callback payload.
This commit is contained in:
Adam Moussa 2026-08-20 12:15:57 -04:00
parent 05d87b2e04
commit f06ffb6fad
No known key found for this signature in database
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
api/src/ProposalSystem.Api/Controllers/AuthController.cs
View file

@ -120,8 +120,8 @@ public class AuthController : ControllerBase
if (user.Role != role)
{
// Fix: API-M13 — log previous role on Cognito-synced role changes
_logger.LogInformation("User {Email} role changed from {OldRole} to {NewRole} via Cognito sync",
user.Email, user.Role, role);
_logger.LogInformation("User {UserId} role changed from {OldRole} to {NewRole} via Cognito sync",
user.Id, user.Role, role);
user.Role = role;
changed = true;
}