url fix 2
All checks were successful
Client Tech / build-deploy (push) Successful in 15s

This commit is contained in:
Grae Jones
2026-03-21 21:28:41 -07:00
parent afccd716f9
commit aef9a6753c
2 changed files with 4 additions and 4 deletions

File diff suppressed because one or more lines are too long

View File

@@ -3,7 +3,7 @@
*
* APP REGISTRATION MAP (positivespend tenant: f56a3c51-9b5c-4356-920f-b4dcf932a96b)
* -------------------------------------------------------------------------
* Tech SPA (this app) 846a3677-9135-4ba6-b7f5-933dcce126be
* Tech SPA (this app) 217928a9-4591-4dff-9f09-5b233824cf4f
* - Platform: SPA
* - Redirect URI: <Tech deployment origin> - must be registered in portal,
* matches window.location.origin at runtime.
@@ -14,7 +14,7 @@
* - App roles: Staff.Admin, Staff.Tech
* - Management validates JWTs issued for this audience
*
* FLOW: MSAL authenticates as 846a3677, acquires a token scoped to
* FLOW: MSAL authenticates as 217928a9, acquires a token scoped to
* api://af95fa13-.../access_as_user, sends as Bearer to Management API.
* Management validates: issuer = login.microsoftonline.com/f56a3c51/v2.0,
* audience = af95fa13 or api://af95fa13, roles = Staff.Admin | Staff.Tech.
@@ -23,7 +23,7 @@
// ── Staff Identity Config ─────────────────────────────────────────────────────
const STAFF_TENANT_ID = 'f56a3c51-9b5c-4356-920f-b4dcf932a96b';
const STAFF_CLIENT_ID = '846a3677-9135-4ba6-b7f5-933dcce126be';
const STAFF_CLIENT_ID = '217928a9-4591-4dff-9f09-5b233824cf4f';
// PROD: swap to → 'https://login.microsoftonline.com/' + STAFF_TENANT_ID
const STAFF_AUTHORITY = 'https://login.microsoftonline.com/' + STAFF_TENANT_ID;