FEAT: Security & Azure deployment for CoPyRIT GUI#1554

Open

adrian-gavrila wants to merge 161 commits intomicrosoft:mainfrom

adrian-gavrila:adrian-gavrila/frontend-attack-view

Commits on Mar 3, 2026

fix: resolve merge conflicts, align service->memory naming

romanlutz
and
Copilot
committed
fix: E731 lambda, E501 line length, service->memory naming

romanlutz
and
Copilot
committed
Merge remote-tracking branch 'origin/main' into romanlutz/frontend_attack_view
romanlutz
committed
Merge remote-tracking branch 'origin/main' into romanlutz/backend-attack-api
romanlutz
committed
Merge remote-tracking branch 'origin/main' into romanlutz/frontend_attack_view
romanlutz
committed
Merge remote-tracking branch 'origin/main' into romanlutz/backend-attack-api
romanlutz
committed
fix: address copilot comments - imports, API contract, security, accessibility

romanlutz
and
Copilot
committed
fix: address copilot comments - security, cleanup, API contract

romanlutz
and
Copilot
committed
Merge remote-tracking branch 'origin/main' into romanlutz/frontend_attack_view
romanlutz
committed
Merge remote-tracking branch 'origin/main' into romanlutz/backend-attack-api
romanlutz
committed
Fix mypy: pass datetime directly instead of isoformat string

romanlutz
and
Copilot
committed

Commits on Mar 4, 2026

Commits on Mar 5, 2026

Commits on Mar 6, 2026

Commits on Mar 7, 2026

Commits on Mar 9, 2026

Commits on Mar 10, 2026

Commits on Mar 11, 2026

Commits on Mar 13, 2026

Commits on Mar 18, 2026

fix: resolve ruff and mypy pre-commit errors in auth middleware

romanlutz
and
Copilot
committed

Commits on Mar 23, 2026

fix: ACA deployment - disable PE, fix auth scope, update docs

Adrian Gavrila
and
Copilot
committed

Commits on Mar 25, 2026

feat: security hardening + CI/CD pipeline for CoPyRIT GUI

Adrian Gavrila
and
Copilot
committed
fix: use template expression to conditionally include prod stage

Adrian Gavrila
and
Copilot
committed
fix: move service connection to compile-time variable

Adrian Gavrila
and
Copilot
committed
fix: remove RBAC role assignments from Bicep template

Adrian Gavrila
and
Copilot
committed

Commits on Mar 26, 2026

fix: supply chain warnings and auth redirect race condition

Adrian Gavrila
and
Copilot
committed
fix: point .npmrc to Azure Artifacts feed (CFS0003)

Adrian Gavrila
and
Copilot
committed
docs: move CSSC rationale from inline comments to infra/README.md

Adrian Gavrila
and
Copilot
committed
revert: use npmjs.org directly instead of Azure Artifacts feed

Adrian Gavrila
and
Copilot
committed

Commits on Mar 27, 2026

feat: multi-group auth support, remove OID allowlist

Adrian Gavrila
and
Copilot
committed
fix: allow Azure Blob Storage in CSP for images and media

Adrian Gavrila
and
Copilot
committed
docs: add dev workflow, fix pipeline variable name

Adrian Gavrila
and
Copilot
committed
fix: migrate groups overage from graph.windows.net to graph.microsoft.com

Adrian Gavrila
and
Copilot
committed
fix: pass envSecretName to Bicep for per-environment KV secrets

Adrian Gavrila
and
Copilot
committed

Commits on Mar 30, 2026

docs: scrub internal names from IaC and README for open-source readiness

Adrian Gavrila
and
Copilot
committed
Merge main and resolve conflicts
Adrian Gavrila
committed

Commits on Mar 31, 2026

Fix npm ci peer dependency conflict with legacy-peer-deps

Adrian Gavrila
and
Copilot
committed
Add tests for auth module to meet coverage thresholds

Adrian Gavrila
and
Copilot
committed
Fix ESLint: replace require() with dynamic import() in msalConfig tests

Adrian Gavrila
and
Copilot
committed