- Self-host msal-browser.min.js v5.6.3 (UMD, 244KB, no CDN dependency) - login.html: SSO button + redirect callback handler + password form fallback - config.js: MSAL config (tenant, client ID, redirect URI) + __SSO_ENABLED flag - server.ts: POST /api/sso/token-exchange — validates Azure ID token using Node crypto (JWKS fetch + 24h cache + RSA-SHA256 sig verify), issues sl_session cookie - server.ts: /api/auth now returns user name/email/authMethod from session - server.ts: CSP updated with login.microsoftonline.com for connect-src + frame-src - docker-compose.yml: pass AZURE_TENANT_ID + AZURE_CLIENT_ID to container - deploy/setup.sh: add Azure AD vars to .env template Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| apache-social-reports.conf | ||
| deploy.sh | ||
| setup.sh | ||