social-reporting-tool/deploy
Vadym Samoilenko 01bea84691 Add Azure AD SSO via MSAL.js SPA flow
- Self-host msal-browser.min.js v5.6.3 (UMD, 244KB, no CDN dependency)
- login.html: SSO button + redirect callback handler + password form fallback
- config.js: MSAL config (tenant, client ID, redirect URI) + __SSO_ENABLED flag
- server.ts: POST /api/sso/token-exchange — validates Azure ID token using Node
  crypto (JWKS fetch + 24h cache + RSA-SHA256 sig verify), issues sl_session cookie
- server.ts: /api/auth now returns user name/email/authMethod from session
- server.ts: CSP updated with login.microsoftonline.com for connect-src + frame-src
- docker-compose.yml: pass AZURE_TENANT_ID + AZURE_CLIENT_ID to container
- deploy/setup.sh: add Azure AD vars to .env template

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-15 18:18:57 +01:00
..
apache-social-reports.conf Fix Apache config: remove ProxyTimeout from Location block 2026-04-07 12:18:02 -04:00
deploy.sh Add quick deploy script for routine updates 2026-04-13 10:44:04 -04:00
setup.sh Add Azure AD SSO via MSAL.js SPA flow 2026-04-15 18:18:57 +01:00