Files
onyx/backend
Claude bdcc56c746 feat(connectors): Microsoft checks share their sign-in row and Graph error rows
The SharePoint, OneDrive and Outlook checks share:
- One sign-in probe, "Sign in to Microsoft". Every check after it depends
  on it, so a bad secret is one failed row and the rest are "Not run".
- The design's sign-in lines. Descriptions name the connector's account
  fields for the account's sign-in method. An expired secret or
  certificate says so.
- The certificate's end date, read from the .pfx: "Certificate valid
  until ...", with a caveat in the last 30 days.
- "Signed in as {app name}", from the token's claims.
- Form runs fail an unreachable sign-in. OneDrive and Outlook sign-in
  validate the credential binding, as SharePoint does.
- Graph errors: a 429 is RateLimitedValidationError and stops the run, no
  answer is UnreachableValidationError, and a 401 and an unexpected answer
  have their rows. Callers pass the rows of a 403 and a 404.
- MicrosoftGraphError is a SourceApiError with the request and the
  response body, so Error Details show them.
- One MicrosoftTokenInfo for the three gateways' check_token.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01KFMazQbuG8ui3jxBxm47sC
2026-10-17 03:12:02 +00:00
..
…
…
…
…