proposal-system/api/src
Adam Moussa ae3ad9d823
Some checks failed
Deploy / Deploy to AWS (push) Has been cancelled
fix: CORS, JWT auth, useBlocker crash, and auto-migration for production deploy
- Add CloudFront origin to API Gateway CORS preflight and .NET CORS policy
- Replace HttpMethod.ANY with explicit methods so OPTIONS preflight doesn't
  hit the JWT authorizer (was causing 403 on all API calls)
- Return Cognito ID token instead of access token from auth callback
  (access tokens lack the aud claim required by API Gateway JWT authorizer)
- Add CloudFront callback URI to allowed redirect list
- Remove identity_provider=Google from login URL to show Cognito hosted UI
- Replace useBlocker (requires data router) with state-based navigation guard
  to fix crash on AdminWorkspace with BrowserRouter
- Add auto-migration on Lambda cold start
- Enable Swagger in production
2026-05-27 19:20:29 -04:00
..
ProposalSystem.Api fix: CORS, JWT auth, useBlocker crash, and auto-migration for production deploy 2026-05-27 19:20:29 -04:00
ProposalSystem.Application fix(api): API-M2, M5, M7, M9, M10, M12, M13 — Medium audit findings 2026-05-27 18:18:44 -04:00
ProposalSystem.Domain Add PDF download for all roles, version history, and status timeline fix 2026-05-27 18:17:48 -04:00
ProposalSystem.Infrastructure fix(api): API-M2, M5, M7, M9, M10, M12, M13 — Medium audit findings 2026-05-27 18:18:44 -04:00