AutopilotMonitor

mirror of https://github.com/okieselbach/AutopilotMonitor.git synced 2026-10-24 04:32:32 +00:00

Files

T

Oliver Kieselbach 1271658b16 Terms + DPA: a new tenant whose first sign-in skipped Get started confirms them once in the portal

- Get started keeps its tick as the acceptance: the CTA hands ?signupConsent=1 to portal (kept per
  tab for 30 minutes, removed from the address bar at once), the first auth/me forwards it, and the
  onboarding write records DpaVersion together with DpaAcceptedBy (first-login UPN) and
  DpaAcceptedAt.
- Any other first sign-in (the navbar "Sign in") sets DpaAcceptancePending on the new row instead.
  auth/me carries the flag; ProtectedRoute renders a blocking dialog with the same sentence and
  links as Get started (shared TermsDpaAgreementText) instead of the page; POST
  auth/dpa-acceptance writes the acceptance for the caller's own tenant only, a no-op 204 when
  nothing is pending.
- Tenants onboarded before this carry no flag and are never asked. Activation is unchanged; the
  dialog appears after it.
- The three new fields are system-owned like OnboardedBy (patch deny-list, revert-protected) and
  projected by config/all, the GA tenant report and the MCP tenant list.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-08 18:23:42 +02:00

AuthFunction.cs

Terms + DPA: a new tenant whose first sign-in skipped Get started confirms them once in the portal

2026-10-08 18:23:42 +02:00

AzureMonitorAlertWebhookFunction.cs

refactor(backend): read the request query through req.Query only

2026-09-21 22:28:11 +02:00

HealthCheckFunction.cs

Typed API contract: every success response is a wire DTO, generated end-to-end into TypeScript (#136 )

2026-08-31 02:30:39 +02:00

McpUserFunction.cs

feat(auth): client-app binding for delegated tokens - measured always, enforced behind a switch (D-279)