Adam Moussa 091c5fcb44 Fix Phase 1 security and data integrity audit findings (#49) ... BLOCK-01: Add API Gateway JWT authorizer with Cognito, route internal Lambda calls through Function URL to bypass gateway auth BLOCK-02/03: Prevent proposal number race condition with pg_advisory_xact_lock and filter revision numbers from max-number query BLOCK-04: Restrict VendorProposals and GeneratedPdfs to admins/sysadmins BLOCK-05: Sum all vendor costs instead of overwriting with single vendor BLOCK-06: Enable ValidateAudience on JWT, add Auth env vars to API Lambda BLOCK-07: Validate ID token signature in AuthController via OIDC discovery BLOCK-08: Use batchItemFailures in all Lambda SQS handlers BLOCK-09: Increase SQS visibility timeout from 180s to 720s FIX-10: Scope dispatcher queries to own proposals (IDOR fix)		2026-05-20 18:51:31 -04:00
..
app.py	Fix Phase 1 security and data integrity audit findings (#49)	2026-05-20 18:51:31 -04:00
requirements.txt	Update boto3 requirement in /lambdas/pdf-extract (#44)	2026-05-18 22:12:28 +00:00