mirror of
https://github.com/Sea-Haven-Industries/proposal-system.git
synced 2026-09-30 19:23:15 +00:00
091c5fcb44
BLOCK-01: Add API Gateway JWT authorizer with Cognito, route internal Lambda calls through Function URL to bypass gateway auth BLOCK-02/03: Prevent proposal number race condition with pg_advisory_xact_lock and filter revision numbers from max-number query BLOCK-04: Restrict VendorProposals and GeneratedPdfs to admins/sysadmins BLOCK-05: Sum all vendor costs instead of overwriting with single vendor BLOCK-06: Enable ValidateAudience on JWT, add Auth env vars to API Lambda BLOCK-07: Validate ID token signature in AuthController via OIDC discovery BLOCK-08: Use batchItemFailures in all Lambda SQS handlers BLOCK-09: Increase SQS visibility timeout from 180s to 720s FIX-10: Scope dispatcher queries to own proposals (IDOR fix) |
||
|---|---|---|
| .. | ||
| AuditService.cs | ||
| CustomerService.cs | ||
| LineItemService.cs | ||
| ProposalNumberGenerator.cs | ||
| ProposalService.cs | ||
| S3Service.cs | ||
| SecretsManagerConnectionString.cs | ||
| SimilarProposalService.cs | ||
| SqsJobPublisher.cs | ||