cesnimda/jobtrackingapp
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

feat(auth): Microsoft OAuth sign-in/link + self-serve signup via Google/Microsoft #22

Merged
cesnimda merged 1 commits from feature/wave7-oauth-signup into main 2026-07-12 01:15:41 +02:00
Conversation 0 Commits 1 Files Changed 16
+729 -17
cesnimda commented 2026-07-12 01:09:17 +02:00
Owner
Copy Link
Copy Source

Wave 7: Microsoft OAuth mirroring existing Google pattern, self-serve signup via Google/Microsoft when unmatched + AllowRegistration, frontend MicrosoftAuthCard.

Wave 7: Microsoft OAuth mirroring existing Google pattern, self-serve signup via Google/Microsoft when unmatched + AllowRegistration, frontend MicrosoftAuthCard.
cesnimda added 1 commit 2026-07-12 01:09:17 +02:00
feat(auth): Microsoft OAuth sign-in/link + self-serve signup via Google/Microsoft
CI and Deploy / test (pull_request) Successful in 2m9s
Details
CI and Deploy / deploy (pull_request) Has been skipped
Details
3081d99355 
Wave 7. Mirrors the existing Google ID-token-exchange pattern (Program.cs
smart-scheme dispatch, JWT bearer scheme, AuthController exchange/link/
unlink endpoints, ApplicationUser fields, reconciler columns) for
Microsoft Entra ID + personal accounts via the multi-tenant "common"
endpoint.

Google/Microsoft sign-in previously only worked for accounts already
linked to an existing local user -- there was no way to actually sign
up via OAuth. Both exchange endpoints now create a new user when no
match is found and Auth:AllowRegistration is true, same gate as
email/password registration.

Frontend: new MicrosoftAuthCard (MSAL popup flow -- Microsoft has no
vanilla-JS equivalent to Google's Identity Services script) wired into
the login page's provider tabs and the profile page's account-linking
section. REACT_APP_MICROSOFT_CLIENT_ID env var, Auth:MicrosoftClientId
config gate on the backend.
cesnimda merged commit 6903032c3b into main 2026-07-12 01:15:41 +02:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
cesnimda
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: cesnimda/jobtrackingapp#22
Delete Branch "feature/wave7-oauth-signup"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?