Repository navigation
v3.1.0
Added
- Keyless service-to-service auth to the orchestrator (ADR-0019). The UI
acquires a Microsoft Entra token with its managed identity (scope from
ORCHESTRATOR_AUTH_AUDIENCE) and sends it inX-Service-Authorization,
keepingAuthorizationfor the user's OBO token. API key and Dapr remain
opt-in fallbacks.