Oliver Kieselbach 7fbfea8f4e Corp identifier validation: probe serialNumber type + unmask validator errors ...

First live WDP enrollment 403d at device validation. Root causes:

- CorporateIdentifierValidator only searched the manufacturerModelSerial
  identifier type, but the Device Preparation guidance has admins upload
  SERIAL-type corporate identifiers - those never matched. The Graph
  searchExistingIdentities call now probes both types in one round-trip.
- SecurityValidator overwrote deviceValidationError per validator, so the
  403 Details only showed the LAST failure (CloudPc) and hid the corporate
  identifier miss. Errors now aggregate in chain order and the transient
  flag is sticky-OR (any transient failure yields 503 Retry-After instead
  of a definitive 403).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-17 16:41:57 +02:00

..

Certificates

chore(backend/security): drop legacy duplicate Intune CA PEMs

2026-05-08 15:59:41 +02:00

AutopilotDeviceValidator.cs

refactor(urls): one guard-enforced URL registry per component, agent downloads move to the alias

2026-07-23 08:37:42 +02:00

BootstrapScriptValueValidator.cs

feat: move OOBE bootstrap script endpoint into the backend (go.autopilotmonitor.com)

2026-07-28 21:42:56 +02:00

CertificateValidator.cs

chore(build): clear the compiler and xUnit analyzer warnings CI annotates

2026-07-22 11:09:11 +02:00

ClientIpExtractor.cs

fix code review findings

2026-07-29 10:30:47 +02:00

CloudPcDeviceValidator.cs

w365: CloudPc device validator — cert-CN-bound fallback for Cloud PCs (#127)

2026-08-07 12:31:08 +02:00

CorporateIdentifierValidator.cs

Corp identifier validation: probe serialNumber type + unmask validator errors

2026-08-17 16:41:57 +02:00

DeviceAssociationResult.cs

feat: added DevPrepValidator (device association) and restructured agent to distinguish Classic vs v2 autopilot flow, in addition option for dev build added

2026-04-14 16:09:32 +02:00

DeviceAssociationValidator.cs

refactor(urls): one guard-enforced URL registry per component, agent downloads move to the alias

2026-07-23 08:37:42 +02:00

EndpointAccessPolicyCatalog.cs

backend: progress-portal serial-knowledge model — server-side lookup, serial proof on events + session-group join

2026-08-15 09:42:24 +02:00

EntraAppRegistry.cs

feat(auth): dual app-reg parallel operation - legacy gktatooine app alongside new C4A8 app

2026-07-31 18:12:25 +02:00

EntraAppRoleResolver.cs

feat(backend): optional per-tenant Entra app-role RBAC (Admin/Operator)

2026-06-17 18:54:39 +02:00

FeatureEntitlementCatalog.cs

feat(plan): rename Enterprise plan to Pro; Pro includes Bootstrap by default and Unrestricted Mode on request

2026-07-31 13:04:47 +02:00

GraphTokenService.cs

feat(auth): self-service app-homing flip via consent flow + GA lever

2026-07-31 19:52:23 +02:00

HardwareWhitelistValidator.cs

more hardenings

2026-02-05 22:12:45 +01:00

ODataSanitizer.cs

bootstrap token auth fix

2026-04-01 02:22:48 +02:00

SecurityValidationExtensions.cs

w365: CloudPc device validator — cert-CN-bound fallback for Cloud PCs (#127)

2026-08-07 12:31:08 +02:00

SecurityValidator.cs

Corp identifier validation: probe serialNumber type + unmask validator errors

2026-08-17 16:41:57 +02:00

SsrfGuard.cs

security hardenings

2026-05-20 19:54:43 +02:00