Consolidate back-office into the account self-contained system with Entra ID Auth#876
Draft
Consolidate back-office into the account self-contained system with Entra ID Auth#876
Conversation
tjementum
changed the title
tjementum
added
the
Deploy to Staging
tjementum
force-pushed
the
back-office-consolidation
branch
from
2294c40 to
b972191
Compare
…, aspire-restart, team-interrupt
…d team-interrupt skill
…ontextProtocol package references
tjementum
force-pushed
the
back-office-consolidation
branch
3 times, most recently
from
e2c6abb to
858f9b0
Compare
…o-bootstrap Entra app registration
tjementum
force-pushed
the
back-office-consolidation
branch
from
858f9b0 to
4936ef6
Compare
tjementum
force-pushed
the
back-office-consolidation
branch
from
4936ef6 to
06c0573
Compare
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary & Motivation
Collapse the back-office self-contained system into the account container and put authentication for the back-office subdomain behind Azure Container Apps built-in authentication (Easy Auth). The legacy
back-officeSCS, its Dockerfile, separate API, separate WebApp, and dedicated CI workflow are removed. The account container now serves both the public app (app.<host>) and the back-office app (back-office.<host>) on host-scoped routes, with EasyAuth enforced at the platform layer for the back-office host.BackOfficeEndpoints,GetMequery,BackOfficeIdentityHandlerfor theX-MS-CLIENT-PRINCIPAL-*header contract,MockEasyAuthMiddlewarefor local development, andBackOfficeGroupRequirementfor authorizationBackOfficeWebAppshell as a sibling toWebAppinside the account project, with its own routes, error pages, side menu, and translations, served via dual SPA hosting (HostScopedSinglePageApp+UseHostScopedSinglePageAppFallback)application/back-officefolder, theback-office.ymlGitHub workflow, the back-office solution filter, and all references in AppHost, AppGateway, and the platform solutionmain-cluster.bicepto drop the back-office container app and addcontainer-app-auth-config.bicepso the account container app is provisioned with EasyAuth bound to the back-office subdomain; the cluster deploy script and account workflow are updated accordinglyapplication/account/WebApp/tests/e2e/back-office-flows.spec.ts, plus subdomain-aware constants inshared-webapp/tests/e2e/utils/constants.tsEndpointMetadataTestsenforce the metadata,HostScopedSinglePageAppcorrectly resolves per-host fallbacks, and the back-office endpoint base test seeds an EasyAuth identityChecklist