cc-dashboard/web/.env.example at main - Oliver/cc-dashboard - Forgejo: Beyond coding. We Forge.

Oliver/cc-dashboard

Vadym Samoilenko 96e6f4ee14 feat: replace local auth with Azure AD SSO (MSAL PKCE)

- New POST /api/auth/microsoft endpoint validates Azure ID token via JWKS
- Removed POST /api/auth/login and /change-password
- Added azure_oid + nullable password_hash to users (migration 0007)
- Auto-provisions all @oliver.agency accounts on first SSO login
- Case-insensitive email matching links existing vadymsamoilenko@ account
- DEV_AUTH_BYPASS flag for local development without MSAL
- Frontend: MSAL loginPopup replaces email/password form
- Added scripts/grant_admin.py for role management

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-05-07 10:43:19 +01:00

5 lines

270 B

Text

Raw Permalink Blame History

 # Azure AD SSO
 VITE_AZURE_TENANT_ID=e519c2e6-bc6d-4fdf-8d9c-923c2f002385
 VITE_AZURE_CLIENT_ID=9079054c-9620-4757-a256-23413042f1ef
 VITE_AZURE_REDIRECT_URI=https://optical-dev.oliver.solutions/cc-dashboard/
 # For local dev, change redirect URI to: http://localhost:5173/