01bea84691
- Self-host msal-browser.min.js v5.6.3 (UMD, 244KB, no CDN dependency) - login.html: SSO button + redirect callback handler + password form fallback - config.js: MSAL config (tenant, client ID, redirect URI) + __SSO_ENABLED flag - server.ts: POST /api/sso/token-exchange — validates Azure ID token using Node crypto (JWKS fetch + 24h cache + RSA-SHA256 sig verify), issues sl_session cookie - server.ts: /api/auth now returns user name/email/authMethod from session - server.ts: CSP updated with login.microsoftonline.com for connect-src + frame-src - docker-compose.yml: pass AZURE_TENANT_ID + AZURE_CLIENT_ID to container - deploy/setup.sh: add Azure AD vars to .env template Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
43 lines
1.3 KiB
YAML
43 lines
1.3 KiB
YAML
services:
|
|
db:
|
|
image: postgres:16-alpine
|
|
ports:
|
|
- "${DB_PORT:-5436}:5432"
|
|
environment:
|
|
POSTGRES_DB: social_listening
|
|
POSTGRES_USER: sl_user
|
|
POSTGRES_PASSWORD: ${DB_PASSWORD:-sl_pass}
|
|
volumes:
|
|
- pgdata:/var/lib/postgresql/data
|
|
- ./db/init.sql:/docker-entrypoint-initdb.d/init.sql
|
|
healthcheck:
|
|
test: ["CMD-SHELL", "pg_isready -U sl_user -d social_listening"]
|
|
interval: 3s
|
|
timeout: 3s
|
|
retries: 10
|
|
|
|
social-listening:
|
|
build: .
|
|
ports:
|
|
- "127.0.0.1:${DASHBOARD_PORT:-3456}:3456"
|
|
env_file:
|
|
- .env
|
|
depends_on:
|
|
db:
|
|
condition: service_healthy
|
|
volumes:
|
|
- ./agents/social-listening/outputs:/app/agents/social-listening/outputs
|
|
- ./agents/social-listening/briefs:/app/agents/social-listening/briefs
|
|
environment:
|
|
- APIFY_LIVE_APPROVED=${APIFY_LIVE_APPROVED:-false}
|
|
- TEST_MODE=${TEST_MODE:-false}
|
|
- DASHBOARD_PORT=3456
|
|
- DATABASE_URL=postgresql://sl_user:${DB_PASSWORD:-sl_pass}@db:5432/social_listening
|
|
- DASH_USER=${DASH_USER:-admin}
|
|
- DASH_PASS=${DASH_PASS:-changeme}
|
|
- ALLOWED_ORIGIN=${ALLOWED_ORIGIN:-}
|
|
- AZURE_TENANT_ID=${AZURE_TENANT_ID:-}
|
|
- AZURE_CLIENT_ID=${AZURE_CLIENT_ID:-}
|
|
|
|
volumes:
|
|
pgdata:
|