Skip to main content

Bilko Mobile Phase 0 Auth Bridge — Status 2026-06-05

null

Update 2026-07-10 — T1 CIAM mobile app provisioning COMPLETE (MC #105193)

  • Canonical mobile app registration: 916bb9f3-658d-4729-b5a0-64b1f157c8c2 "Bilko Mobile (Native)" — single-tenant (AzureADMyOrg), public client, PKCE, redirects com.alai.bilko://auth + msauth.com.alai.bilko://auth.
  • Stray duplicate 31d2eb67 (invalid AzureADandPersonalMicrosoftAccount audience for CIAM, no API perms) deleted 2026-07-10.
  • Admin consent verified (Graph oauth2PermissionGrants, AllPrincipals): bilko-api access_as_user + Graph openid profile offline_access email User.Read.
  • apps/mobile/eas.json: client ID wired in all 3 build profiles; EXPO_PUBLIC_API_URL on Azure stage FQDN. PR 90 squash-merged to main (1cd39b59); ENTRA_SCOPES now includes api://fe39e0f5-513e-40af-93f0-c3ee624df56c/access_as_user, usePKCE: true.
  • Securion (Parisa) S3: PASS-WITH-FINDINGS; F1 open → live decoded access token must carry oid + email claim — verified in T3 MC #105194 (EAS build + live CIAM login).
  • P2P peer pre-verify (Proveo native agent): PASS 7/7. Evidence: ~/system/evidence/105193/.
  • Live probes 2026-07-10: stage API GET /api/v1/health = 200; CIAM OIDC discovery = 200 (authorize/token endpoints resolve).
Back to top