Adam Moussa 866601025d Validate dev-login input: reject empty email and invalid role ... Empty-string email passed model binding but created a ghost user with no identity. Invalid role strings (e.g. "SuperHero") silently defaulted to Admin, granting unintended elevated access. Now returns 400 for both cases. Default role changed from Admin to Dispatcher (least privilege).		2026-05-20 18:08:55 -04:00
..
src	Validate dev-login input: reject empty email and invalid role	2026-05-20 18:08:55 -04:00
global.json	Fix JSON enum serialization and audit log jsonb format	2026-05-20 17:23:55 -04:00
ProposalSystem.sln	Initial scaffold: monorepo structure, CDK stacks, CI/CD, domain model	2026-05-16 18:40:46 -04:00