- MSAL.js handles full OAuth flow in browser (SPA-compatible) - Server validates ID token signature via Azure AD JWKS endpoint (PyJWT) - Root / serves MSAL shell for unauthenticated users, handles redirect callback - Remove Python MSAL/PKCE server-side logic - Replace msal dependency with PyJWT[crypto] Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| settings.local.json | ||