Commit Graph

717 Commits

Author SHA1 Message Date
Oliver Kieselbach 68857ebabb vul report fix 3 2026-03-28 17:00:24 +01:00
Oliver Kieselbach 9db2678315 vul report fix 2 2026-03-28 16:51:42 +01:00
Oliver Kieselbach 908640a47d fix vul report 2026-03-28 16:09:03 +01:00
Oliver Kieselbach 91cba0e093 session handling 2026-03-28 11:36:49 +01:00
Oliver Kieselbach be549a0b6d fix session hanling 2026-03-28 11:28:20 +01:00
Oliver Kieselbach 19e5283676 force re-initialize 2026-03-28 11:22:38 +01:00
Oliver Kieselbach 8d49a798a4 fix internal error 2026-03-28 11:16:40 +01:00
Oliver Kieselbach 825e062d92 fixed auth function 2026-03-28 10:56:50 +01:00
Oliver Kieselbach e6c5f0fca2 oauth fix 2026-03-28 10:38:52 +01:00
Oliver Kieselbach fff0db014f added logging 2026-03-28 10:29:06 +01:00
Oliver Kieselbach de21d2c7b1 final mcp work 2026-03-28 09:51:57 +01:00
Oliver Kieselbach fbea8b5ca4 final CORS fix by using different route 2026-03-28 09:42:28 +01:00
Oliver Kieselbach 30ecdac684 moved CORS to env vars 2026-03-28 09:33:29 +01:00
Oliver Kieselbach 49a14c0a00 added CORS middleware 2026-03-28 09:26:44 +01:00
Oliver Kieselbach cefdc5e8fb CORS fix 2026-03-28 09:16:27 +01:00
Oliver Kieselbach d0a79310f4 oauth flow changes 2026-03-28 09:02:23 +01:00
Oliver Kieselbach b7d040d33d CORS fix 2026-03-28 08:54:39 +01:00
Oliver Kieselbach b297923b59 fix mcp users sidebar entry 2026-03-28 08:35:00 +01:00
Oliver Kieselbach 8a4a7cf255 Remote MCP server: Streamable HTTP transport, Container App deployment, MCP user access control
- MCP server: stdio → Streamable HTTP (Express) with /health endpoint
- Auth: device code flow → token pass-through (JWT from Claude Code client)
- Dockerfile (multi-stage, node:22-slim) + .dockerignore
- Bicep template: ACR + Container App Environment + Container App (scale-to-zero)
- GitHub Actions: deploy-mcp.yml workflow, all backend workflows migrated to SP auth
- Removed unused dev/main deploy workflows
- Backend: McpAccessPolicy enum (Disabled/WhitelistOnly/AllMembers)
- Backend: McpUsers table + McpUserService (5min cache) + McpUserFunction (CRUD + access check)
- Backend: 6 endpoints registered in EndpointAccessPolicyCatalog
- Web UI: MCP Users management section at /settings/access/mcp-users
- Web UI: user list, add/remove/enable/disable, policy info banner

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-28 08:09:58 +01:00
Oliver Kieselbach 72d000e9a8 oauth flow change 2026-03-28 06:41:43 +01:00
Oliver Kieselbach 1609710fe3 oauh flow changes 2026-03-28 06:32:45 +01:00
Oliver Kieselbach 219f5c686a oauth for mcp server 2026-03-28 06:15:12 +01:00
Oliver Kieselbach be5a37e7bb oauth for mcp server 2026-03-28 06:15:08 +01:00
Oliver Kieselbach 7cae2515c1 change title 2026-03-28 05:42:08 +01:00
Oliver Kieselbach cb14e3afbe switch to managed identity 2026-03-28 04:32:34 +01:00
Oliver Kieselbach a6f552a877 added MCP capabilities 2026-03-28 04:20:50 +01:00
Oliver Kieselbach 802e59799c fix compiler nullable warnings 2026-03-27 22:36:36 +01:00
Oliver Kieselbach 4eec3767a7 fixed SEO meta and search route conflicts 2026-03-27 22:23:55 +01:00
Oliver Kieselbach e63929cb30 changed route for quick search 2026-03-27 22:16:30 +01:00
Oliver Kieselbach f016620a29 layout fix quick search 2026-03-27 22:06:11 +01:00
Oliver Kieselbach f2acfc06f1 changed bing auth 2026-03-27 22:01:43 +01:00
Oliver Kieselbach 99eac1369f layout fixes and fuzzy search 2026-03-27 21:50:46 +01:00
Oliver Kieselbach 22af37e994 added global quick search 2026-03-27 21:37:03 +01:00
Oliver Kieselbach 12880a8e1d renamings 2026-03-27 20:59:05 +01:00
Oliver Kieselbach c4dabeeef4 fix CVE data sync and signalr join 2026-03-27 20:48:35 +01:00
Oliver Kieselbach 8a1c8a553c fix timestamps in agent 2026-03-27 20:08:16 +01:00
Oliver Kieselbach 87ba9281f8 fix agent timestamps 2026-03-27 19:43:55 +01:00
Oliver Kieselbach 284cab5a24 check for unique rule id 2026-03-27 19:05:57 +01:00
Oliver Kieselbach d9bfd0c9af check for unique rule id 2026-03-27 19:05:29 +01:00
Oliver Kieselbach 769beaa14a Refactorings for many reusables, API URL builder, CollectorBaseClass, CorrelationID Middleware, added Polly for external APIs 2026-03-27 11:14:38 +01:00
Oliver Kieselbach 738f524083 fix nullables 2026-03-27 09:35:14 +01:00
Oliver Kieselbach 905e42064b fixed usings 2026-03-27 09:17:17 +01:00
Oliver Kieselbach 22215521f2 Merge pull request #31 from okieselbach/claude/data-access-layer-pyC29
Implement repository pattern for data access abstraction
2026-03-27 09:08:37 +01:00
Oliver Kieselbach d38d5b5906 Merge branch 'main' of https://github.com/okieselbach/Autopilot-Monitor 2026-03-27 09:00:39 +01:00
Oliver Kieselbach a2f14c1ee9 added IME process watcher 2026-03-27 09:00:33 +01:00
Claude f5ec4247e9 Migrate FeedbackFunction + TenantOffboardFunction to repositories
- FeedbackFunction → IConfigRepository (feedback CRUD)
- TenantOffboardFunction → IMaintenanceRepository.DeleteAllTenantDataAsync()

Zero functions/services now create their own TableServiceClient.
All table access goes through repository interfaces.

https://claude.ai/code/session_01NHWJfPaa8TQHuPzMD7gG63
2026-03-27 07:38:19 +00:00
Claude c8f308c60b Add Feedback + TenantOffboard repository methods (implementations ready)
- IConfigRepository: Add GetFeedbackEntryAsync, SaveFeedbackEntryAsync, GetAllFeedbackEntriesAsync
- IMaintenanceRepository: Add DeleteAllTenantDataAsync
- TableConfigRepository: Implement feedback CRUD against PreviewConfig table
- TableMaintenanceRepository: Implement bulk tenant data deletion with batch deletes

Function migrations (FeedbackFunction, TenantOffboardFunction) in progress.

https://claude.ai/code/session_01NHWJfPaa8TQHuPzMD7gG63
2026-03-27 07:36:27 +00:00
Claude 878b762ca5 Consolidate all repositories to share single TableServiceClient
All 10 repository implementations now get their TableClient instances from
the central TableStorageService singleton instead of creating their own
TableServiceClient connections.

Before: 8 parallel TableServiceClient instances to same Storage Account
After:  1 shared TableServiceClient (+ 2 domain-specific functions)

https://claude.ai/code/session_01NHWJfPaa8TQHuPzMD7gG63
2026-03-27 07:29:56 +00:00
Claude d9abf724a3 Migrate VulnerabilityCorrelationService to IVulnerabilityRepository — Phase 4 complete
- VulnerabilityCorrelationService: TableStorageService → IVulnerabilityRepository + ISessionRepository
- IAdminRepository: Add SetTenantMemberEnabledAsync
- TableAdminRepository, TenantAdminsService: Implement enable/disable via new method
- DataAccessServiceExtensions: Add IDeviceSecurityRepository registration

All 12 bypass services now use repository interfaces. Zero services create
their own TableServiceClient. Only repository implementations + TableStorageService
+ 2 domain-specific functions (Feedback, TenantOffboard) have direct table access.

https://claude.ai/code/session_01NHWJfPaa8TQHuPzMD7gG63
2026-03-27 07:21:37 +00:00
Claude f6157ec8d0 TableAdminRepository refinement from background agent
https://claude.ai/code/session_01NHWJfPaa8TQHuPzMD7gG63
2026-03-27 07:18:27 +00:00