gmal-scope-builder/backend/app
Vadym Samoilenko b7db37828b Fix 401: send ID token instead of Graph access token
Access tokens for User.Read scope have audience=graph.microsoft.com,
but the backend validates audience=CLIENT_ID. ID tokens always have
audience=CLIENT_ID so they validate correctly.

Also add upn claim fallback for email extraction from ID token.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-30 11:16:44 +01:00
..
api Fix 504 timeouts on upload/match and broken exports 2026-03-30 10:57:34 +01:00
middleware Fix 401: send ID token instead of Graph access token 2026-03-30 11:16:44 +01:00
models AI-enhanced GMAL descriptions + matching fixes 2026-03-28 10:12:04 -04:00
schemas AI-enhanced GMAL descriptions + matching fixes 2026-03-28 10:12:04 -04:00
services Add AI/Automation efficiency adjustment for team shape 2026-03-28 10:36:44 -04:00
utils Improve matching, upload UX, collapse fix, full catalog approach 2026-03-27 19:22:08 -04:00
__init__.py Initial commit - GMAL Scope Builder 2026-03-27 17:35:14 -04:00
config.py Initial commit - GMAL Scope Builder 2026-03-27 17:35:14 -04:00
database.py Initial commit - GMAL Scope Builder 2026-03-27 17:35:14 -04:00
main.py Add Azure SSO + production deployment config 2026-03-28 18:51:18 +00:00