Add docs for Azure auth

backend/src/services/identity-azure-auth/identity-azure-auth-service.ts

@@ -63,7 +63,7 @@ export const identityAzureAuthServiceFactory = ({
       const isServicePrincipalAllowed = identityAzureAuth.allowedServicePrincipalIds
         .split(",")
         .map((servicePrincipalId) => servicePrincipalId.trim())
-        .some((servicePrincipalId) => servicePrincipalId === azureIdentity.appid);
+        .some((servicePrincipalId) => servicePrincipalId === azureIdentity.oid);
 
       if (!isServicePrincipalAllowed) throw new UnauthorizedError();
     }

backend/src/services/identity-azure-auth/identity-azure-auth-types.ts

@@ -79,7 +79,7 @@ type TUserPayload = {
   xms_tcdt: number;
 };
 
-type TAppRegistrationPayload = {
+type TAppPayload = {
   aud: string;
   iss: string;
   iat: number;
@@ -90,7 +90,7 @@ type TAppRegistrationPayload = {
   appidacr: string;
   idp: string;
   idtyp: string;
-  oid: string;
+  oid: string; // service principal id
   rh: string;
   sub: string;
   tid: string;
@@ -103,7 +103,7 @@ type TAppRegistrationPayload = {
   xms_tcdt: number;
 };
 
-export type TAzureAuthJwtPayload = TUserPayload | TAppRegistrationPayload;
+export type TAzureAuthJwtPayload = TUserPayload | TAppPayload;
 
 export type TDecodedAzureAuthJwt = {
   header: {

backend/src/services/identity-azure-auth/identity-azure-auth-validators.ts

@@ -0,0 +1,14 @@
+import { z } from "zod";
+
+export const validateAzureAuthField = z
+  .string()
+  .trim()
+  .default("")
+  .transform((data) => {
+    if (data === "") return "";
+    // Trim each ID and join with ', ' to ensure formatting
+    return data
+      .split(",")
+      .map((id) => id.trim())
+      .join(", ");
+  });