- Change frontend apiTokenRequest scopes from OpenID-only to CLIENT_ID/.default This makes Azure AD issue tokens with audience = app client ID instead of Graph API - Add diagnostic logging in backend to show token claims before verification - Fixes 401 Unauthorized errors on all API calls after login 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| apiService.ts | ||
| authConfig.ts | ||
| authService.ts | ||
| geminiService.ts | ||