proposal-system/api/src/ProposalSystem.Api/Controllers
Adam Moussa ae3ad9d823
Some checks failed
Deploy / Deploy to AWS (push) Has been cancelled
fix: CORS, JWT auth, useBlocker crash, and auto-migration for production deploy
- Add CloudFront origin to API Gateway CORS preflight and .NET CORS policy
- Replace HttpMethod.ANY with explicit methods so OPTIONS preflight doesn't
  hit the JWT authorizer (was causing 403 on all API calls)
- Return Cognito ID token instead of access token from auth callback
  (access tokens lack the aud claim required by API Gateway JWT authorizer)
- Add CloudFront callback URI to allowed redirect list
- Remove identity_provider=Google from login URL to show Cognito hosted UI
- Replace useBlocker (requires data router) with state-based navigation guard
  to fix crash on AdminWorkspace with BrowserRouter
- Add auto-migration on Lambda cold start
- Enable Swagger in production
2026-05-27 19:20:29 -04:00
..
AdminController.cs fix(api): API-M2, M5, M7, M9, M10, M12, M13 — Medium audit findings 2026-05-27 18:18:44 -04:00
AuthController.cs fix: CORS, JWT auth, useBlocker crash, and auto-migration for production deploy 2026-05-27 19:20:29 -04:00
CustomersController.cs Implement Backend API Core (Phase 1) 2026-05-16 18:49:48 -04:00
FilesController.cs fix(api): API-M2, M5, M7, M9, M10, M12, M13 — Medium audit findings 2026-05-27 18:18:44 -04:00
GeneratedPdfsController.cs fix(api): API-M2, M5, M7, M9, M10, M12, M13 — Medium audit findings 2026-05-27 18:18:44 -04:00
LineItemsController.cs fix: API medium findings (API-M3, M4, M6, M8, M11, M14) 2026-05-27 18:18:44 -04:00
ProposalsController.cs audit: fix all Critical and High security/reliability issues across monorepo 2026-05-27 18:18:44 -04:00
SitesController.cs Add site search, PO number, service category Other, and form enhancements 2026-05-27 18:17:48 -04:00
UsersController.cs fix(api): API-M2, M5, M7, M9, M10, M12, M13 — Medium audit findings 2026-05-27 18:18:44 -04:00
VendorProposalsController.cs fix(api): API-M2, M5, M7, M9, M10, M12, M13 — Medium audit findings 2026-05-27 18:18:44 -04:00