@microsoft/teamsfx-core 1.6.1 → 1.6.2-alpha.eb3c5cc12.0

package/templates/plugins/resource/aad/auth/bot/ts/sso/showUserInfo.ts

@@ -0,0 +1,24 @@
+import { createMicrosoftGraphClient, TeamsFx } from "@microsoft/teamsfx";
+import { TurnContext } from "botbuilder";
+import { DialogTurnResult } from "botbuilder-dialogs";
+
+export async function showUserInfo(
+  context: TurnContext,
+  ssoToken: string
+): Promise<DialogTurnResult> {
+  await context.sendActivity("Retrieving user information from Microsoft Graph ...");
+  const teamsfx = new TeamsFx().setSsoToken(ssoToken);
+  const graphClient = createMicrosoftGraphClient(teamsfx, ["User.Read"]);
+  const me = await graphClient.api("/me").get();
+  if (me) {
+    await context.sendActivity(
+      `You're logged in as ${me.displayName} (${me.userPrincipalName})${
+        me.jobTitle ? `; your job title is: ${me.jobTitle}` : ""
+      }.`
+    );
+  } else {
+    await context.sendActivity("Could not retrieve profile information from Microsoft Graph.");
+  }
+
+  return;
+}

package/templates/plugins/resource/aad/auth/bot/ts/sso/ssoDialog.ts

@@ -0,0 +1,182 @@
+import {
+  ComponentDialog,
+  WaterfallDialog,
+  Dialog,
+  DialogTurnResult,
+  DialogSet,
+  DialogTurnStatus,
+} from "botbuilder-dialogs";
+import { ActivityTypes, Storage, tokenExchangeOperationName, TurnContext } from "botbuilder";
+import { TeamsBotSsoPrompt, TeamsBotSsoPromptTokenResponse, TeamsFx } from "@microsoft/teamsfx";
+import "isomorphic-fetch";
+
+const DIALOG_NAME = "SSODialog";
+const TEAMS_SSO_PROMPT_ID = "TeamsFxSsoPrompt";
+const COMMAND_ROUTE_DIALOG = "CommandRouteDialog";
+
+export class SsoDialog extends ComponentDialog {
+  private requiredScopes: string[];
+  private dedupStorage: Storage;
+  private dedupStorageKeys: string[] = [];
+  private commandMapping: Map<string, string | RegExp> = new Map<string, string | RegExp>();
+
+  constructor(dedupStorage: Storage, requiredScopes: string[]) {
+    super(DIALOG_NAME);
+
+    this.initialDialogId = COMMAND_ROUTE_DIALOG;
+
+    this.dedupStorage = dedupStorage;
+    this.dedupStorageKeys = [];
+    this.requiredScopes = requiredScopes;
+
+    const teamsFx = new TeamsFx();
+    const ssoDialog = new TeamsBotSsoPrompt(teamsFx, TEAMS_SSO_PROMPT_ID, {
+      scopes: this.requiredScopes,
+      endOnInvalidMessage: true,
+    });
+    this.addDialog(ssoDialog);
+
+    const commandRouteDialog = new WaterfallDialog(COMMAND_ROUTE_DIALOG, [
+      this.commandRouteStep.bind(this),
+    ]);
+    this.addDialog(commandRouteDialog);
+  }
+
+  public addCommand(
+    commandId: string,
+    commandText: string | RegExp,
+    operation: (context: TurnContext, ssoToken: string) => Promise<DialogTurnResult>
+  ): void {
+    const dialog = new WaterfallDialog(commandId, [
+      this.ssoStep.bind(this),
+      this.dedupStep.bind(this),
+      async (stepContext: any) => {
+        const tokenResponse: TeamsBotSsoPromptTokenResponse = stepContext.result;
+        const context: TurnContext = stepContext.context;
+        if (tokenResponse) {
+          await operation(context, tokenResponse.ssoToken);
+        } else {
+          await context.sendActivity("Failed to retrieve user token from conversation context.");
+        }
+        return await stepContext.endDialog();
+      },
+    ]);
+
+    if (this.commandMapping.has(commandId)) {
+      throw new Error(`Cannot add command. There is already a command with same id ${commandId}`);
+    }
+    this.commandMapping.set(commandId, commandText);
+    this.addDialog(dialog);
+  }
+
+  /**
+   * The run method handles the incoming activity (in the form of a DialogContext) and passes it through the dialog system.
+   * If no dialog is active, it will start the default dialog.
+   * @param {*} dialogContext
+   */
+  public async run(context: TurnContext, accessor: any) {
+    const dialogSet = new DialogSet(accessor);
+    dialogSet.add(this);
+
+    const dialogContext = await dialogSet.createContext(context);
+    const results = await dialogContext.continueDialog();
+    if (results && results.status === DialogTurnStatus.empty) {
+      await dialogContext.beginDialog(this.id);
+    }
+  }
+
+  private async commandRouteStep(stepContext: any) {
+    const turnContext = stepContext.context as TurnContext;
+
+    // remove the mention of this bot
+    let text = TurnContext.removeRecipientMention(turnContext.activity);
+    if (text) {
+      // remove the line break
+      text = text.toLowerCase().replace(/\n|\r/g, "").trim();
+    }
+
+    const commandId = this.matchCommands(text);
+    if (commandId) {
+      return await stepContext.beginDialog(commandId);
+    }
+    return await stepContext.endDialog();
+  }
+
+  private async ssoStep(stepContext: any) {
+    return await stepContext.beginDialog(TEAMS_SSO_PROMPT_ID);
+  }
+
+  private async dedupStep(stepContext: any) {
+    const tokenResponse = stepContext.result;
+    // Only dedup after ssoStep to make sure that all Teams client would receive the login request
+    if (tokenResponse && (await this.shouldDedup(stepContext.context))) {
+      return Dialog.EndOfTurn;
+    }
+    return await stepContext.next(tokenResponse);
+  }
+
+  public async onEndDialog(context: TurnContext) {
+    const conversationId = context.activity.conversation.id;
+    const currentDedupKeys = this.dedupStorageKeys.filter((key) => key.indexOf(conversationId) > 0);
+    await this.dedupStorage.delete(currentDedupKeys);
+    this.dedupStorageKeys = this.dedupStorageKeys.filter((key) => key.indexOf(conversationId) < 0);
+  }
+
+  // If a user is signed into multiple Teams clients, the Bot might receive a "signin/tokenExchange" from each client.
+  // Each token exchange request for a specific user login will have an identical activity.value.Id.
+  // Only one of these token exchange requests should be processed by the bot. For a distributed bot in production,
+  // this requires a distributed storage to ensure only one token exchange is processed.
+  private async shouldDedup(context: TurnContext): Promise<boolean> {
+    const storeItem = {
+      eTag: context.activity.value.id,
+    };
+
+    const key = this.getStorageKey(context);
+    const storeItems = { [key]: storeItem };
+
+    try {
+      await this.dedupStorage.write(storeItems);
+      this.dedupStorageKeys.push(key);
+    } catch (err) {
+      if (err instanceof Error && err.message.indexOf("eTag conflict")) {
+        return true;
+      }
+      throw err;
+    }
+    return false;
+  }
+
+  private getStorageKey(context: TurnContext): string {
+    if (!context || !context.activity || !context.activity.conversation) {
+      throw new Error("Invalid context, can not get storage key!");
+    }
+    const activity = context.activity;
+    const channelId = activity.channelId;
+    const conversationId = activity.conversation.id;
+    if (activity.type !== ActivityTypes.Invoke || activity.name !== tokenExchangeOperationName) {
+      throw new Error("TokenExchangeState can only be used with Invokes of signin/tokenExchange.");
+    }
+    const value = activity.value;
+    if (!value || !value.id) {
+      throw new Error("Invalid signin/tokenExchange. Missing activity.value.id.");
+    }
+    return `${channelId}/${conversationId}/${value.id}`;
+  }
+
+  private matchCommands(text: string): string {
+    for (const command of this.commandMapping) {
+      const pattern: string | RegExp = command[1];
+      let matchResult: RegExpExecArray | boolean;
+      if (typeof pattern == "string") {
+        matchResult = text === pattern;
+      } else {
+        matchResult = pattern.exec(text);
+      }
+      if (matchResult) {
+        return command[0]; // Return the command id
+      }
+    }
+
+    return undefined;
+  }
+}

package/templates/plugins/resource/aad/auth/bot/ts/sso/teamsSsoBot.ts

@@ -0,0 +1,69 @@
+import {
+  BotState,
+  ConversationState,
+  MemoryStorage,
+  SigninStateVerificationQuery,
+  StatePropertyAccessor,
+  TeamsActivityHandler,
+  TurnContext,
+  UserState,
+} from "botbuilder";
+import { showUserInfo } from "./showUserInfo";
+import { SsoDialog } from "./ssoDialog";
+
+export class TeamsSsoBot extends TeamsActivityHandler {
+  private dialog: SsoDialog;
+  private userState: BotState;
+  private conversationState: BotState;
+  private dialogState: StatePropertyAccessor;
+
+  constructor() {
+    super();
+
+    // Define the state store for your bot.
+    // See https://aka.ms/about-bot-state to learn more about using MemoryStorage.
+    // A bot requires a state storage system to persist the dialog and user state between messages.
+    const memoryStorage = new MemoryStorage();
+
+    // Create conversation and user state with in-memory storage provider.
+    this.conversationState = new ConversationState(memoryStorage);
+    this.userState = new UserState(memoryStorage);
+    this.dialog = new SsoDialog(new MemoryStorage(), ["User.Read"]);
+    this.dialogState = this.conversationState.createProperty("DialogState");
+
+    // Add commands that requires user authentication
+    this.dialog.addCommand("ShowUserProfile", "show", showUserInfo);
+    // call the `addCommand` function to add more customized commands
+
+    this.onMessage(async (context, next) => {
+      console.log("Running with Message Activity.");
+
+      // Run the Dialog with the new message Activity.
+      await this.dialog.run(context, this.dialogState);
+
+      // By calling next() you ensure that the next BotHandler is run.
+      await next();
+    });
+  }
+
+  async run(context: TurnContext) {
+    await super.run(context);
+
+    // Save any state changes. The load happened during the execution of the Dialog.
+    await this.conversationState.saveChanges(context, false);
+    await this.userState.saveChanges(context, false);
+  }
+
+  async handleTeamsSigninVerifyState(context: TurnContext, query: SigninStateVerificationQuery) {
+    console.log("Running dialog with signin/verifystate from an Invoke Activity.");
+    await this.dialog.run(context, this.dialogState);
+  }
+
+  async handleTeamsSigninTokenExchange(context: TurnContext, query: SigninStateVerificationQuery) {
+    await this.dialog.run(context, this.dialogState);
+  }
+
+  async onSignInInvoke(context: TurnContext) {
+    await this.dialog.run(context, this.dialogState);
+  }
+}

package/templates/plugins/resource/aad/manifest/aad.template.json

@@ -18,7 +18,7 @@
     },
     "requiredResourceAccess": [
         {
-            "resourceAppId": "00000003-0000-0000-c000-000000000000",
+            "resourceAppId": "Microsoft Graph",
             "resourceAccess": [
                 {
                     "id": "User.Read",
@@ -33,8 +33,6 @@
             "adminConsentDisplayName": "Teams can access app's web APIs",
             "id": "{{state.fx-resource-aad-app-for-teams.oauth2PermissionScopeId}}",
             "isEnabled": true,
-            "lang": null,
-            "origin": "Application",
             "type": "User",
             "userConsentDescription": "Enable Teams to call this app's web APIs with the same rights that you have",
             "userConsentDisplayName": "Teams can access app's web APIs and make requests on your behalf",
@@ -43,13 +41,13 @@
     ],
     "preAuthorizedApplications": [
         {
-            "appId": "bc59ab01-8403-45c6-8796-ac3ef710b3e3",
+            "appId": "1fec8e78-bce4-4aaf-ab1b-5451cc387264",
             "permissionIds": [
                 "{{state.fx-resource-aad-app-for-teams.oauth2PermissionScopeId}}"
             ]
         },
         {
-            "appId": "00000002-0000-0ff1-ce00-000000000000",
+            "appId": "5e3ce6c0-2b1f-4285-8d4b-75ee78787346",
             "permissionIds": [
                 "{{state.fx-resource-aad-app-for-teams.oauth2PermissionScopeId}}"
             ]
@@ -61,13 +59,13 @@
             ]
         },
         {
-            "appId": "4765445b-32c6-49b0-83e6-1d93765276ca",
+            "appId": "00000002-0000-0ff1-ce00-000000000000",
             "permissionIds": [
                 "{{state.fx-resource-aad-app-for-teams.oauth2PermissionScopeId}}"
             ]
         },
         {
-            "appId": "4345a7b9-9a63-4910-a426-35363201d503",
+            "appId": "bc59ab01-8403-45c6-8796-ac3ef710b3e3",
             "permissionIds": [
                 "{{state.fx-resource-aad-app-for-teams.oauth2PermissionScopeId}}"
             ]
@@ -79,23 +77,18 @@
             ]
         },
         {
-            "appId": "5e3ce6c0-2b1f-4285-8d4b-75ee78787346",
+            "appId": "4765445b-32c6-49b0-83e6-1d93765276ca",
             "permissionIds": [
                 "{{state.fx-resource-aad-app-for-teams.oauth2PermissionScopeId}}"
             ]
         },
         {
-            "appId": "1fec8e78-bce4-4aaf-ab1b-5451cc387264",
+            "appId": "4345a7b9-9a63-4910-a426-35363201d503",
             "permissionIds": [
                 "{{state.fx-resource-aad-app-for-teams.oauth2PermissionScopeId}}"
             ]
         }
     ],
-    "passwordCredentials": [
-        {
-            "displayName": "default"
-        }
-    ],
     "identifierUris": [
         "{{state.fx-resource-aad-app-for-teams.applicationIdUris}}"
     ],

package/templates/plugins/resource/apiconnector/sample/js/api-connector.template

@@ -0,0 +1,30 @@
+const teamsfxSdk = require("@microsoft/teamsfx");
+
+// Loads current app's configuration
+const teamsFx = new teamsfxSdk.TeamsFx();
+// Initializes a new axios instance to call {{config.APIName}} API
+const authProvider = new teamsfxSdk.BasicAuthProvider(
+  teamsFx.getConfig("API_{{capitalName}}_USERNAME"),
+  teamsFx.getConfig("API_{{capitalName}}_PASSWORD")
+);
+const {{config.APIName}}Client = teamsfxSdk.createApiClient(teamsFx.getConfig("API_{{capitalName}}_ENDPOINT"), authProvider);
+export { {{config.APIName}}Client };
+
+/* 
+You can now call {{config.APIName}} APIs without worrying about authentication. 
+Here is an example for a GET request to "relative_path_of_target_api": 
+const result = await {{config.APIName}}Client.get("relative_path_of_target_api"); 
+
+You can refer https://aka.ms/teamsfx-connect-api to learn more. 
+*/
+
+/* 
+Setting API configuration for cloud environment: 
+We have already set the configuration to .env.teamsfx.local based on your answers. 
+Before you deploy your code to cloud using TeamsFx, please follow https://aka.ms/teamsfx-add-appsettings to add following app settings with appropriate value to your Azure environment: 
+API_{{capitalName}}_ENDPOINT 
+API_{{capitalName}}_USERNAME 
+API_{{capitalName}}_PASSWORD 
+
+You can refer https://aka.ms/teamsfx-connet-api to learn more. 
+*/

package/templates/plugins/resource/apiconnector/sample/ts/api-connector.template

@@ -0,0 +1,30 @@
+import { TeamsFx, createApiClient, BasicAuthProvider } from "@microsoft/teamsfx";
+
+// Loads current app's configuration
+const teamsFx = new TeamsFx();
+// Initializes a new axios instance to call {{config.APIName}} API
+const authProvider = new BasicAuthProvider(
+  teamsFx.getConfig("API_{{capitalName}}_USERNAME"),
+  teamsFx.getConfig("API_{{capitalName}}_PASSWORD")
+);
+const {{config.APIName}}Client = createApiClient(teamsFx.getConfig("API_{{capitalName}}_ENDPOINT"), authProvider);
+export { {{config.APIName}}Client };
+
+/* 
+You can now call {{config.APIName}} APIs without worrying about authentication. 
+Here is an example for a GET request to "relative_path_of_target_api": 
+const result = await {{config.APIName}}Client.get("relative_path_of_target_api"); 
+
+You can refer https://aka.ms/teamsfx-connect-api to learn more. 
+*/
+
+/* 
+Setting API configuration for cloud environment: 
+We have already set the configuration to .env.teamsfx.local based on your answers. 
+Before you deploy your code to cloud using TeamsFx, please follow https://aka.ms/teamsfx-add-appsettings to add following app settings with appropriate value to your Azure environment: 
+API_{{capitalName}}_ENDPOINT 
+API_{{capitalName}}_USERNAME 
+API_{{capitalName}}_PASSWORD 
+
+You can refer https://aka.ms/teamsfx-connet-api to learn more. 
+*/

package/templates/plugins/resource/bot/bicep/botProvision.template.bicep

@@ -54,6 +54,7 @@ resource webApp 'Microsoft.Web/sites@2021-02-01' = {
   properties: {
     serverFarmId: serverfarm.id
     keyVaultReferenceIdentity: userAssignedIdentityId // Use given user assigned identity to access Key Vault
+    httpsOnly: true
     siteConfig: {
       appSettings: [
         {
@@ -64,7 +65,12 @@ resource webApp 'Microsoft.Web/sites@2021-02-01' = {
           name: 'WEBSITE_NODE_DEFAULT_VERSION'
           value: '~14' // Set NodeJS version to 14.x for your site
         }
+        {
+          name: 'RUNNING_ON_AZURE'
+          value: '1'
+        }
       ]
+      ftpsState: 'FtpsOnly'
     }
   }
   identity: {

package/templates/plugins/resource/bot/bicep/funcHostedBotProvision.template.bicep

@@ -0,0 +1,127 @@
+@secure()
+param provisionParameters object
+param userAssignedIdentityId string
+
+var resourceBaseName = provisionParameters.resourceBaseName
+var botAadAppClientId = provisionParameters['botAadAppClientId'] // Read AAD app client id for Azure Bot Service from parameters
+var botServiceName = contains(provisionParameters, 'botServiceName') ? provisionParameters['botServiceName'] : '${resourceBaseName}' // Try to read name for Azure Bot Service from parameters
+var botServiceSku = contains(provisionParameters, 'botServiceSku') ? provisionParameters['botServiceSku'] : 'F0' // Try to read SKU for Azure Bot Service from parameters
+var botDisplayName = contains(provisionParameters, 'botDisplayName') ? provisionParameters['botDisplayName'] : '${resourceBaseName}' // Try to read display name for Azure Bot Service from parameters
+var serverfarmsName = contains(provisionParameters, 'botServerfarmsName') ? provisionParameters['botServerfarmsName'] : '${resourceBaseName}bot' // Try to read name for App Service Plan from parameters
+var webAppSKU = contains(provisionParameters, 'botWebAppSKU') ? provisionParameters['botWebAppSKU'] : 'B1' // Try to read SKU for Azure Web App from parameters
+var webAppName = contains(provisionParameters, 'botSitesName') ? provisionParameters['botSitesName'] : '${resourceBaseName}bot' // Try to read name for Azure Web App from parameters
+var storageName = contains(provisionParameters, 'botStorageName') ? provisionParameters['botStorageName'] : '${resourceBaseName}bot' // Try to read name for Azure Storage from parameters
+var storageSku = contains(provisionParameters, 'botStorageSku') ? provisionParameters['botStorageSku'] : 'Standard_LRS' // Try to read SKU for Azure Storage from parameters
+
+// Register your web service as a bot with the Bot Framework
+resource botService 'Microsoft.BotService/botServices@2021-03-01' = {
+  kind: 'azurebot'
+  location: 'global'
+  name: botServiceName
+  properties: {
+    displayName: botDisplayName
+    endpoint: uri('https://${functionApp.properties.defaultHostName}', '/api/messages')
+    msaAppId: botAadAppClientId
+  }
+  sku: {
+    name: botServiceSku // You can follow https://aka.ms/teamsfx-bicep-add-param-tutorial to add botServiceSku property to provisionParameters to override the default value "F0".
+  }
+}
+
+// Connect the bot service to Microsoft Teams
+resource botServiceMsTeamsChannel 'Microsoft.BotService/botServices/channels@2021-03-01' = {
+  parent: botService
+  location: 'global'
+  name: 'MsTeamsChannel'
+  properties: {
+    channelName: 'MsTeamsChannel'
+  }
+}
+
+// Compute resources for your Web App
+resource serverfarm 'Microsoft.Web/serverfarms@2021-02-01' = {
+  kind: 'functionapp'
+  location: resourceGroup().location
+  name: serverfarmsName
+  sku: {
+    name: webAppSKU
+  }
+}
+
+// Web App that hosts your bot
+resource functionApp 'Microsoft.Web/sites@2021-02-01' = {
+  kind: 'functionapp'
+  location: resourceGroup().location
+  name: webAppName
+  properties: {
+    serverFarmId: serverfarm.id
+    keyVaultReferenceIdentity: userAssignedIdentityId // Use given user assigned identity to access Key Vault
+    httpsOnly: true
+    siteConfig: {
+      alwaysOn: true
+      appSettings: [
+        {
+          name: 'AzureWebJobsDashboard'
+          value: 'DefaultEndpointsProtocol=https;AccountName=${storage.name};AccountKey=${listKeys(storage.id, storage.apiVersion).keys[0].value};EndpointSuffix=${environment().suffixes.storage}' // Azure Functions internal setting
+        }
+        {
+          name: 'AzureWebJobsStorage'
+          value: 'DefaultEndpointsProtocol=https;AccountName=${storage.name};AccountKey=${listKeys(storage.id, storage.apiVersion).keys[0].value};EndpointSuffix=${environment().suffixes.storage}' // Azure Functions internal setting
+        }
+        {
+          name: 'FUNCTIONS_EXTENSION_VERSION'
+          value: '~3' // Use Azure Functions runtime v3
+        }
+        {
+          name: 'FUNCTIONS_WORKER_RUNTIME'
+          value: 'node' // Set runtime to NodeJS
+        }
+        {
+          name: 'WEBSITE_CONTENTAZUREFILECONNECTIONSTRING'
+          value: 'DefaultEndpointsProtocol=https;AccountName=${storage.name};AccountKey=${listKeys(storage.id, storage.apiVersion).keys[0].value};EndpointSuffix=${environment().suffixes.storage}' // Azure Functions internal setting
+        }
+        {
+          name: 'WEBSITE_RUN_FROM_PACKAGE'
+          value: '1' // Run Azure Functions from a package file
+        }
+        {
+          name: 'WEBSITE_NODE_DEFAULT_VERSION'
+          value: '~14' // Set NodeJS version to 14.x
+        }
+        {
+          name: 'RUNNING_ON_AZURE'
+          value: '1'
+        }
+        {
+          name: 'SCM_ZIPDEPLOY_DONOT_PRESERVE_FILETIME'
+          value: '1' // Zipdeploy files will always be updated. Detail: https://aka.ms/teamsfx-zipdeploy-donot-preserve-filetime
+        }
+      ]
+      ftpsState: 'FtpsOnly'
+    }
+  }
+  identity: {
+    type: 'UserAssigned'
+    userAssignedIdentities: {
+      '${userAssignedIdentityId}': {} // The identity is used to access other Azure resources
+    }
+  }
+}
+
+// Azure Storage is required when creating Azure Functions instance
+resource storage 'Microsoft.Storage/storageAccounts@2021-06-01' = {
+  name: storageName
+  kind: 'StorageV2'
+  location: resourceGroup().location
+  sku: {
+    name: storageSku // You can follow https://aka.ms/teamsfx-bicep-add-param-tutorial to add functionStorageSku property to provisionParameters to override the default value "Standard_LRS".
+  }
+}
+
+output botWebAppSKU string = webAppSKU
+output botWebAppName string = webAppName
+output botDomain string = functionApp.properties.defaultHostName
+output appServicePlanName string = serverfarmsName
+output botServiceName string = botServiceName
+output botWebAppResourceId string = functionApp.id
+output botWebAppEndpoint string = 'https://${functionApp.properties.defaultHostName}'

package/templates/plugins/resource/function/bicep/functionProvision.template.bicep

@@ -27,6 +27,7 @@ resource functionApp 'Microsoft.Web/sites@2021-02-01' = {
   properties: {
     serverFarmId: serverfarms.id
     keyVaultReferenceIdentity: userAssignedIdentityId // Use given user assigned identity to access Key Vault
+    httpsOnly: true
     siteConfig: {
       appSettings: [
         {
@@ -58,6 +59,7 @@ resource functionApp 'Microsoft.Web/sites@2021-02-01' = {
           value: '~14' // Set NodeJS version to 14.x
         }
       ]
+      ftpsState: 'FtpsOnly'
     }
   }
   identity: {

package/templates/plugins/resource/simpleauth/bicep/simpleAuthProvision.template.bicep

@@ -25,6 +25,10 @@ resource webApp 'Microsoft.Web/sites@2021-02-01' = {
   properties: {
     serverFarmId: serverFarms.id
     keyVaultReferenceIdentity: userAssignedIdentityId // Use given user assigned identity to access Key Vault
+    httpsOnly: true
+    siteConfig:{
+      ftpsState: 'FtpsOnly'
+    }
   }
   identity: {
     type: 'UserAssigned'

package/templates/plugins/resource/spfx/solution/README.md

@@ -6,7 +6,7 @@ The SharePoint Framework (SPFx) is a page and web part model that provides full
 
 ## Used SharePoint Framework Version
 
-![version](https://img.shields.io/badge/version-1.12.1-green.svg)
+![version](https://img.shields.io/badge/version-1.14.0-green.svg)
 
 ## Applies to
 
@@ -15,7 +15,7 @@ The SharePoint Framework (SPFx) is a page and web part model that provides full
 
 ## Prerequisites
 
-> - Node.js v10/12/14
+> - Node.js v12/14
 > - An M365 account. Get your own free Microsoft 365 tenant from [M365 developer program](https://developer.microsoft.com/en-us/microsoft-365/dev-program)
 
 ## Solution

package/templates/plugins/resource/sql/bicep/sqlProvision.template.bicep

@@ -13,6 +13,7 @@ resource sqlServer 'Microsoft.Sql/servers@2021-05-01-preview' = {
   location: resourceGroup().location
   name: sqlServerName
   properties: {
+    minimalTlsVersion:'1.2'
     administratorLogin: empty(administratorLogin) ? null : administratorLogin
     administratorLoginPassword: administratorLoginPassword
   }

package/templates/plugins/resource/webapp/bicep/webappProvision.template.bicep

@@ -23,6 +23,7 @@ resource webApp 'Microsoft.Web/sites@2021-02-01' = {
   properties: {
     serverFarmId: serverFarms.id
     keyVaultReferenceIdentity: userAssignedIdentityId
+    httpsOnly: true
     siteConfig: {
       appSettings: [
         {
@@ -30,6 +31,7 @@ resource webApp 'Microsoft.Web/sites@2021-02-01' = {
           value: '1'
         }
       ]
+      ftpsState: 'FtpsOnly'
     }
   }
   identity: {