No description
Find a file
Vadym Samoilenko 08710e1a16 fix: verify JWT signature via JWKS and fix auth dev bypass condition
- msal_auth.py: replace verify_signature=False with real JWKS verification
  using PyJWKClient; validates RS256 signature, aud=clientId, issuer v2.0
- App.tsx: split DEV bypass from empty-accounts case — in production,
  accounts.length === 0 now correctly triggers loginRedirect instead of
  calling fetchMe without a token

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-23 14:44:22 +00:00
backend fix: verify JWT signature via JWKS and fix auth dev bypass condition 2026-03-23 14:44:22 +00:00
frontend fix: verify JWT signature via JWKS and fix auth dev bypass condition 2026-03-23 14:44:22 +00:00
.env.example feat: add full AI provider config to .env.example and docker-compose 2026-03-23 14:30:16 +00:00
.gitignore Add deploy script, .env.example, and Apache reverse proxy config 2026-03-23 14:05:33 +00:00
deploy.sh fix: run git pull as SUDO_USER to use correct SSH keys 2026-03-23 14:25:44 +00:00
docker-compose.yml feat: add full AI provider config to .env.example and docker-compose 2026-03-23 14:30:16 +00:00
Dockerfile Initial commit — AC Tool unified application 2026-03-23 13:24:46 +00:00
run_dev.sh Initial commit — AC Tool unified application 2026-03-23 13:24:46 +00:00