map-services / street-manager-relay / 27125677141

30%

push

github

feat: add signature v2 support and improve DB layer (#46)

- Add support for SNS signature version 2 (SHA256).
- Tighten security by restricting `SigningCertURL` to trusted AWS
domains.
- Refactor `DbRepository` to use a helper approach for event column
mapping,
  improving maintainability and reducing boilerplate.
- Standardize HTTP fetching and error handling across routes.

```mermaid
sequenceDiagram
    participant User as SNS Service
    participant Relay as App
    participant DB as SQLite

    User->>Relay: POST /sns (Message + Signature)
    Relay->>Relay: Verify Signature (v1 or v2)
    Relay->>Relay: Validate Cert URL (amazonaws.com)
    Relay->>DB: Upsert Event (ON CONFLICT)
    DB-->>Relay: OK
    Relay-->>User: 200 OK
```

---------

Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>

165 of 222 new or added lines in 8 files covered. (74.32%)

411 of 1363 relevant lines covered (30.15%)

0.32 hits per line