lorentz
4978780962
- Proxies Microsoft Graph user photo bytes to authenticated mobile clients - requireAuth() is first call — unauthenticated requests get 401 before Graph - 503 when MSGRAPH_* env not configured (isMsgraphConfigured gate, D-26) - 400 for malformed userId (path traversal denylist, permissive per VARCHAR(255)) - 404 neutral response when user has no photo (no userId oracle) - 200 with Cache-Control: private, max-age=3600 on success (D-25) - 502 neutral response on Graph upstream errors (no token/user leakage) |
||
|---|---|---|
| .. | ||
| analyzer/feed | ||
| dashboard | ||
| engagement | ||
| finance | ||
| tickets | ||