apf_portal

julien/apf_portal

Fork 0

Files

T

History

Julien Gautier ad369d872a

CI / scan (pull_request) Successful in 2m47s

Details

CI / commits (pull_request) Successful in 2m47s

Details

CI / check (pull_request) Successful in 2m56s

Details

CI / a11y (pull_request) Successful in 2m40s

Details

CI / perf (pull_request) Successful in 5m51s

Details

fix(portal-bff): align admin entra role name with Portal.Admin

The AdminRoleGuard was matching on `admin`, but the Entra app
registration declares the role with value `Portal.Admin`. Sessions
were established with `roles: []`, so every authenticated user got
a 403 on `/api/admin/audit` and `/api/admin/users`.

Single source of truth: the `ADMIN_ROLE` constant in
admin-role.guard.ts. The spec already imports the constant, so the
behaviour rolls through unchanged.

Doc-comment touches in admin-role.guard.ts, admin.controller.ts and
audit.service.ts keep the inline references accurate; ADR-0020,
docs/architecture.md and CLAUDE.md updated to the new name.

2026-05-15 10:29:51 +02:00