Skip to content

Replace Windows Live authentication with Microsoft - #2403

Open
niemyjski wants to merge 15 commits into
mainfrom
issue/microsoft-authentication
Open

niemyjski wants to merge 15 commits into
mainfrom
issue/microsoft-authentication

Conversation

@niemyjski

@niemyjski niemyjski commented Jul 27, 2026 •

Copy link
Copy Markdown
Member

Replace Windows Live authentication with Microsoft Identity Platform v2 and Graph in the API and Svelte UI. Microsoft linking now requires signing in to an existing, email-verified account; unlinked identities cannot sign up, match accounts by email, or bypass this restriction through invitations. Existing linked identities can sign in without changing email-verification state. Editable Microsoft profile email also no longer automatically verifies an email-address change. Integrates latest main and its Svelte root-route cutover.

Validation: Release build passes with zero warnings/errors; six isolated auth-handler tests, eight Microsoft frontend tests, Svelte validation, production build, and rendered signup checks pass. Fresh Astra medium review found no remaining actionable issues after both security fixes.

Pending verification: Current-head hosted Build is pending. New endpoint regressions compile but have not run locally; real Entra consent/Graph callback remains unverified without an app registration.

Approved breaking changes: /api/v2/auth/live is replaced by /api/v2/auth/microsoft; the bundled Windows Live client ID and Microsoft signup option are removed. Users must create and verify an account or sign in through another method/password recovery, then link Microsoft in account settings. Microsoft login stays hidden until configured.

Verification and implementation details
  • Main integration preserves the secure runtime configuration writer and main's removal of Angular and obsolete HTTP samples. Auth-handler regressions use main's Moq setup; OAuth tests use root routes.
  • The Svelte exchange validates state, preserves invitation/return parameters, and displays expected API errors without changing the session or navigating. Microsoft-only configuration does not render an empty OAuth signup section.
  • Microsoft Graph mail is not ownership proof. Linking rejects unverified accounts before credential mutation; unlinked identities are rejected before email lookup or account creation. Other providers retain existing behavior.
  • Endpoint regressions cover rejected unlinked signup/invitations, rejected unverified linking, established linked identities retaining verification state, and email changes through Microsoft (unverified with a verification token) versus Google (verified). These compile; execution awaits hosted API CI. Historical September results are not proof of this head.
  • Local verification: dotnet build tests/Exceptionless.Tests/Exceptionless.Tests.csproj --configuration Release --no-restore -m:1 /nr:false; direct execution of the Release test DLL with --filter-class Exceptionless.Tests.Api.Handlers.AuthHandlerTests; focused Microsoft Vitest coverage; Svelte validation and production build.
  • Configure an Entra application supporting organizational and personal accounts, each UI origin as a Web redirect URI, delegated Graph User.Read, and a client secret. Set MicrosoftId=<client-id>;MicrosoftSecret=<secret>; in EX_ConnectionStrings__OAuth.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 68278822f5

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread src/Exceptionless.Web/Api/Endpoints/AuthEndpoints.cs
Comment thread src/Exceptionless.Web/ClientApp.angular/app/auth/auth.js Outdated

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 716f6d7911

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread src/Exceptionless.Web/Api/Endpoints/AuthEndpoints.cs
@niemyjski niemyjski self-assigned this Jul 30, 2026
@niemyjski
niemyjski force-pushed the issue/microsoft-authentication branch from d3d23d0 to ec96f56 Compare September 11, 2026 03:30
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Sep 11, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-13T03:15:32.004267Z ccd0f29 New commits
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@niemyjski
niemyjski force-pushed the issue/microsoft-authentication branch from fc0f025 to a4c506a Compare September 16, 2026 00:39

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: a4c506a146

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread src/Exceptionless.Web/Api/Handlers/AuthHandler.cs Outdated

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: bfaa57a3cd

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread src/Exceptionless.Web/Api/Handlers/AuthHandler.cs Outdated

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 3fdd94da54

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread src/Exceptionless.Web/ClientApp.angular/app/auth/auth.js Outdated
@github-actions

Copy link
Copy Markdown

Code Coverage

Package Line Rate Branch Rate Complexity Health
Exceptionless.AppHost 23% 23% 128 ❌
Exceptionless.Core 77% 69% 10879 ✔
Exceptionless.Insulation 51% 43% 370 ➖
Exceptionless.Web 86% 71% 9199 ✔
Summary 80% (28131 / 35114) 69% (13896 / 20152) 20576 ✔

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant