Procurement Risk API

Invoice data often needs to be checked for risk signals such as duplicate invoices, suspicious timing, and below-threshold amounts. This project turns that logic into a structured backend API.

• Turned invoice risk rules into inspectable API behavior
• Kept data access, auth, risk checks, and analytics separated
• Documented the backend automatically through OpenAPI

• REST endpoints for invoice retrieval, risk detection, and analytics
• Risk rules for duplicate invoices, below-threshold amounts, and weekend transactions
• CSV-to-PostgreSQL ingestion pipeline with a dedicated pipeline endpoint
• JWT and OAuth2 Bearer authentication with bcrypt password hashing
• PostgreSQL schema via SQLAlchemy with protected routes
• Analytics summary endpoint for invoices, risk signals, and severity counts
• Swagger/OpenAPI documentation through /docs