mirror of
https://github.com/hanzoai/team.git
synced 2026-09-30 01:57:35 +00:00
zeekay
8feb24ea1f
The server module named github.com/hanzoai/team/server/v8 — a path that resolves to the retired workspace's repository, not this one — while server/public still published github.com/mattermost/mattermost/server/public. Both are github.com/hanzoteam/server/... now, which is where this code actually lives. That second half is what made the binary unbootable. Upstream's public path stayed claimed by upstream, mattermost-plugin-ai imported it, and the build linked public/model twice; public/plugin's gob.Register then ran twice under one name and panicked at init, before main. Reverting the rename traded the brand for a working binary. Rebranding the plugin alongside it needs no such trade: the agents fork is github.com/hanzoteam/agents/v2 against our public module, so no module named mattermost/mattermost is in the graph at all. Measured: `go list -deps ./cmd/mattermost` names exactly one public/model, and it is ours.
35 lines
1.5 KiB
Go
35 lines
1.5 KiB
Go
// Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved.
|
|
// See LICENSE.txt for license information.
|
|
|
|
package einterfaces
|
|
|
|
import (
|
|
"github.com/hanzoteam/server/server/public/model"
|
|
"github.com/hanzoteam/server/server/public/shared/request"
|
|
)
|
|
|
|
// IntuneInterface provides methods for Microsoft Intune MAM authentication.
|
|
// This allows mobile users to authenticate via Microsoft Entra ID (Azure AD) MSAL tokens
|
|
// and map to existing users who login via Office 365 or SAML on other clients.
|
|
type IntuneInterface interface {
|
|
// IsConfigured checks if Intune MAM is properly configured and enabled.
|
|
// Returns true if IntuneSettings.Enable is true and all required configuration is present.
|
|
IsConfigured() bool
|
|
|
|
// Login authenticates a user using a Microsoft Entra ID access_token from MSAL.
|
|
// The token is validated against Microsoft's JWKS endpoint with proper key rollover support.
|
|
// The access_token's audience claim is validated against the tenant-specific IntuneScope
|
|
// to ensure proper tenant isolation.
|
|
// The user is then matched to an existing user based on the configured AuthService
|
|
// (either 'office365' or 'saml'), or a new user is created if allowed.
|
|
//
|
|
// Parameters:
|
|
// - rctx: Request context for logging and tracing
|
|
// - accessToken: The access_token from MSAL authentication
|
|
//
|
|
// Returns:
|
|
// - user: The authenticated user (matched or newly created)
|
|
// - appError: Error if authentication fails
|
|
Login(rctx request.CTX, accessToken string) (*model.User, *model.AppError)
|
|
}
|