Repository navigation
This PR resolves four backend integration gaps in separate commits: - #811
Merged
Merged
Conversation
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Route database reads through the configured replica selector and fall back to the primary when no replica is healthy. Configure replicas from environment variables, expose metrics access, and cover replica selection and failover.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Expose the fraud-scoring endpoint, persist each score to the database audit log, and add a bounded authenticated rate limit. Document the request and response contract and cover the mounted route and audit record.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Wire SAML, read replicas, CDC, and fraud scoring
|
@lekescrew22 Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits. You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Closes #741
Closes #742
Closes #743
Closes #744
Summary
This PR resolves four backend integration gaps in separate commits:
SAML SSO: Export and mount metadata, login, and ACS routes. Add environment-backed service-provider/identity-provider configuration and XML-DSig verification against the pinned IdP certificate; routes fail closed while SAML is not configured.
Read replicas: Export read_replica, configure replica connections from environment settings, route database reads through the selector, and fall back to the primary when no replica is healthy. Add explicit construction and routing/failover coverage.
CDC: Export the existing CDC module from the crate root.
Fraud scoring: Mount POST /fraud/score, persist each result in the SQL audit log, apply per-tier rate limits, document the endpoint, and test response/audit persistence.
Validation
All 23 SAML module tests passed in an isolated harness.
Added tests for replica selection/failover and the mounted fraud scoring route/audit record.
The focused Cargo test could not reach test execution because the existing backend crate does not compile: it has missing modules and unrelated pre-existing type/API errors (including existing fraud test fixtures). These baseline failures are outside this PR scope.
Commits
18dd7bb Mount and secure SAML SSO routes
205da58 Integrate read replicas with Db
fa55e6b Expose CDC module
70b7764 Mount fraud scoring with audit logging