TenantAtlas/app
ahmido c5fbcaa692 063-entra-signin (#76)
Key changes

Adds Entra OIDC redirect + callback endpoints under /auth/entra/* (token exchange only there).
Upserts tenant users keyed by (entra_tenant_id = tid, entra_object_id = oid); regenerates session; never stores tokens.
Blocks disabled / soft-deleted users with a generic error and safe logging.
Membership-based post-login routing:
0 memberships → /admin/no-access
1 membership → tenant dashboard (via Filament URL helpers)
>1 memberships → /admin/choose-tenant
Adds Filament pages:
/admin/choose-tenant (tenant selection + redirect)
/admin/no-access (tenantless-safe)
Both use simple layout to avoid tenant-required UI.
Guards / tests

Adds DbOnlyPagesDoNotMakeHttpRequestsTest to enforce DB-only render/hydration for:
/admin/login, /admin/no-access, /admin/choose-tenant
with Http::preventStrayRequests()
Adds session separation smoke coverage to ensure tenant session doesn’t access system and vice versa.
Runs: vendor/bin/sail artisan test --compact tests/Feature/Auth

Co-authored-by: Ahmed Darrazi <ahmeddarrazi@MacBookPro.fritz.box>
Reviewed-on: #76
2026-01-27 16:38:53 +00:00
..
Console/Commands 056-remove-legacy-bulkops (#65) 2026-01-19 23:27:52 +00:00
Exceptions feat/032-backup-scheduling-mvp (#34) 2026-01-05 04:22:13 +00:00
Filament 063-entra-signin (#76) 2026-01-27 16:38:53 +00:00
Http/Controllers 063-entra-signin (#76) 2026-01-27 16:38:53 +00:00
Jobs fix: Harden SyncPoliciesJob supported types handling (#75) 2026-01-26 19:23:40 +00:00
Listeners 056-remove-legacy-bulkops (#65) 2026-01-19 23:27:52 +00:00
Livewire feat: tag badge catalog (060) (#72) 2026-01-23 23:05:55 +00:00
Models 063-entra-signin (#76) 2026-01-27 16:38:53 +00:00
Notifications 056-remove-legacy-bulkops (#65) 2026-01-19 23:27:52 +00:00
Observers 054-unify-runs-suitewide (#63) 2026-01-17 22:25:00 +00:00
Policies feat: unify provider connection actions and notifications (#73) 2026-01-25 01:01:37 +00:00
Providers 063-entra-signin (#76) 2026-01-27 16:38:53 +00:00
Rules feat/049-backup-restore-job-orchestration (#56) 2026-01-11 15:59:06 +00:00
Services 063-entra-signin (#76) 2026-01-27 16:38:53 +00:00
Support 062-tenant-rbac-v1 (#74) 2026-01-25 15:27:39 +00:00