5 Commits (692a64e039257b4604d1197cb0af82aacf2cce26)

Author	SHA1	Message	Date
Ryan Arakawa	692a64e039	require AWS CloudFront (#35) ... CloudFront signed URLs implemented, but the Gemfile has require: false. So we need to explicitly require it in DocumentSecurityService	1 month ago
Bernardo Anderson	c83c455213	CP-11289 - Fix rubocop issues	2 months ago
Bernardo Anderson	7ddafe0b13	CP-11289 - Migrate CloudFront config to environment variables ... Remove hardcoded CloudFront domains and key pair IDs from repository. All CloudFront configuration now loaded from ENV variables for security: - CF_URL: CloudFront distribution URL - CF_KEY_PAIR_ID: CloudFront key pair identifier - CF_KEY_SECRET: AWS Secrets Manager path for private key - SECURED_STORAGE_BUCKET: S3 bucket name - SECURED_STORAGE_REGION: AWS region This prevents exposure of infrastructure identifiers in public repository. Configuration should be set via cpdocuseal deployment module.	2 months ago
Bernardo Anderson	2a4d9f70f5	CP-11289 - Rubocop fixes	2 months ago
Bernardo Anderson	bfcc59d70f	CP-11289 - Add CloudFront signed URLs for secured document storage ... Implement compliance storage configuration using AWS CloudFront signed URLs for completed documents. This reuses the existing ATS infrastructure to provide secure, time-limited access to document storage while maintaining backward compatibility with legacy storage. - Add aws-sdk-cloudfront dependency for URL signing - Create DocumentSecurityService for CloudFront signed URL generation - Add secured storage service configuration in storage.yml - Update completed_documents model with storage_location tracking - Modify download controllers to use signed URLs for secured storage - Add compliance_storage.yml configuration for different environments - Update submitter completion job to track storage location BREAKING CHANGE: Requires SECURED_STORAGE_BUCKET and SECURED_STORAGE_REGION environment variables for staging/production environments	2 months ago