bbfa6e4a3c
feat(api): switch live auth to host cookie BFF
...
Replace Bearer as the documented session path with Cognito hosted UI plus __Host-ap_* cookies so the SPA can call /api with credentials include.
2026-09-22 12:39:00 -04:00
cc637e3732
feat(api): serve portal-shaped health and error envelope
...
Move liveness to GET /api/health { stage, sha } with a Node 24 image on 8080 so ALB probes and deploy verify do not need auth or a database ping.
2026-09-22 12:33:19 -04:00
Adam Moussa
9d3646876e
feat(api): stand up Hono Drizzle foundation with auth and Redocly (AP-14) ( #12 )
...
* feat(api): stand up Hono Drizzle foundation with auth and Redocly
* fix(api): bump drizzle-orm and hono node-server past audit highs
* fix(api): harden auth upsert and Cognito token verification
2026-08-11 00:10:49 +00:00
