Skip to content

Feature/iap workforce auth#198

Open
eric-lyons wants to merge 32 commits into
GoogleCloudPlatform:mainfrom
eric-lyons:feature/iap-workforce-auth
Open

Feature/iap workforce auth#198
eric-lyons wants to merge 32 commits into
GoogleCloudPlatform:mainfrom
eric-lyons:feature/iap-workforce-auth

Conversation

@eric-lyons

Copy link
Copy Markdown
Collaborator

Fixes #<issue_number_goes_here>

It's a good idea to open an issue first for discussion.

  • Tests pass
  • Appropriate changes to documentation are included in the PR

…ing hash on redirect, and disable index.html caching in Firebase
- Use X-Custom-Auth header to pass token to backend, bypassing Firebase Hosting proxy overwrite
- Add CustomOAuth2PasswordBearer to auth_guard.py to inspect X-Custom-Auth
- Add debug UI in login component
…loginPopup

- Switch MSAL flow from loginRedirect to loginPopup for seamless UX

- Use X-Custom-Auth header to bypass Cloud Run IAM proxy
Resolves CWE-798 by removing hardcoded Client ID and Tenant ID from the deployment script.
…a config in bootstrap

- backend/src/auth/auth_guard.py: Add fallback to preferred_username and upn if email claim is missing.
- backend/tests/auth/test_auth_guard.py: Add unit tests for the fallback scenarios.
- bootstrap.sh: Add prompts and automation for configuring Microsoft Entra ID.
- backend/tests/workflows/test_workflow_service.py: Add unit test verifying workspace_id parsing defaults to None on invalid input.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant