eionet2-dashboard 1.4.0

package/tabs/src/data/validator.js

@@ -0,0 +1,25 @@
+let mandatoryText = 'Please fill out this field!';
+
+export function validatePhone(value) {
+  if (value) {
+    let reg = new RegExp(/^-?[+0-9. -]+$/).test(value);
+    if (!reg) {
+      return 'Only numbers and characters +, -, . are allowed.';
+    }
+  }
+}
+
+export function validateName(value) {
+  if (!value) {
+    return mandatoryText;
+  }
+  if (value.length < 2) {
+    return 'Please enter at least 2 characters!';
+  }
+}
+
+export function validateMandatoryField(value) {
+  if ((Array.isArray(value) && !value.length) || !value) {
+    return mandatoryText;
+  }
+}

package/tabs/src/data/validator.test.js

@@ -0,0 +1,9 @@
+const validator = require('./validator');
+
+test('validateName', () => {
+  expect(validator.validateName('t')).toBe('Please enter at least 2 characters!');
+});
+
+test('validateMandatoryField-alwaysFail', () => {
+  expect(validator.validateMandatoryField('test')).toBe(undefined);
+});

package/tabs/src/index.css

@@ -0,0 +1,16 @@
+* {
+  box-sizing: border-box;
+  /* outline: 1px dashed #f00; */
+}
+
+body {
+  margin: 5em;
+  font-family: 'Roboto Flex', sans-serif;
+  -webkit-font-smoothing: antialiased;
+  -moz-osx-font-smoothing: grayscale;
+  background-color: #eeeeee;
+}
+
+.main {
+  background-color: white;
+}

package/tabs/src/index.jsx

@@ -0,0 +1,6 @@
+import React from 'react';
+import ReactDOM from 'react-dom';
+import App from './components/App';
+import './index.css';
+
+ReactDOM.render(<App />, document.getElementById('root'));

package/tabs/src/static/images/teams-icon.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg"  viewBox="0 0 48 48" width="24px" height="24px"><path fill="#5059c9" d="M44,22v8c0,3.314-2.686,6-6,6s-6-2.686-6-6V20h10C43.105,20,44,20.895,44,22z M38,16	c2.209,0,4-1.791,4-4c0-2.209-1.791-4-4-4s-4,1.791-4,4C34,14.209,35.791,16,38,16z"/><path fill="#7b83eb" d="M35,22v11c0,5.743-4.841,10.356-10.666,9.978C19.019,42.634,15,37.983,15,32.657V20h18	C34.105,20,35,20.895,35,22z M25,17c3.314,0,6-2.686,6-6s-2.686-6-6-6s-6,2.686-6,6S21.686,17,25,17z"/><circle cx="25" cy="11" r="6" fill="#7b83eb"/><path d="M26,33.319V20H15v12.657c0,1.534,0.343,3.008,0.944,4.343h6.374C24.352,37,26,35.352,26,33.319z" opacity=".05"/><path d="M15,20v12.657c0,1.16,0.201,2.284,0.554,3.343h6.658c1.724,0,3.121-1.397,3.121-3.121V20H15z" opacity=".07"/><path d="M24.667,20H15v12.657c0,0.802,0.101,1.584,0.274,2.343h6.832c1.414,0,2.56-1.146,2.56-2.56V20z" opacity=".09"/><linearGradient id="DqqEodsTc8fO7iIkpib~Na" x1="4.648" x2="23.403" y1="14.648" y2="33.403" gradientUnits="userSpaceOnUse"><stop offset="0" stop-color="#5961c3"/><stop offset="1" stop-color="#3a41ac"/></linearGradient><path fill="url(#DqqEodsTc8fO7iIkpib~Na)" d="M22,34H6c-1.105,0-2-0.895-2-2V16c0-1.105,0.895-2,2-2h16c1.105,0,2,0.895,2,2v16	C24,33.105,23.105,34,22,34z"/><path fill="#fff" d="M18.068,18.999H9.932v1.72h3.047v8.28h2.042v-8.28h3.047V18.999z"/></svg>

package/tabs/src/utils/uiHelper.js

@@ -0,0 +1,6 @@
+export function a11yProps(index) {
+  return {
+    id: `simple-tab-${index}`,
+    'aria-controls': `simple-tabpanel-${index}`,
+  };
+}

package/templates/appPackage/aad.template.json

@@ -0,0 +1,133 @@
+{
+    "id": "{{state.fx-resource-aad-app-for-teams.objectId}}",
+    "appId": "{{state.fx-resource-aad-app-for-teams.clientId}}",
+    "name": "{{config.manifest.appName.short}}-aad",
+    "accessTokenAcceptedVersion": 2,
+    "signInAudience": "AzureADMyOrg",
+    "optionalClaims": {
+        "idToken": [],
+        "accessToken": [
+            {
+                "name": "idtyp",
+                "source": null,
+                "essential": false,
+                "additionalProperties": []
+            }
+        ],
+        "saml2Token": []
+    },
+    "requiredResourceAccess": [
+        {
+            "resourceAppId": "Microsoft Graph",
+            "resourceAccess": [
+                {
+                    "id": "User.Read.All",
+                    "type": "Role"
+                },
+                {
+                    "id": "Sites.Read.All",
+                    "type": "Role"
+                },
+                {
+                    "id": "OnlineMeetings.Read.All",
+                    "type": "Role"
+                },
+                {
+                    "id": "User.Read",
+                    "type": "Scope"
+                },
+                {
+                    "id": "Mail.Send",
+                    "type": "Role"
+                },
+                {
+                    "id": "User.ReadWrite.All",
+                    "type": "Role"
+                },
+                {
+                    "id": "Sites.ReadWrite.All",
+                    "type": "Role"
+                }
+            ]
+        }
+    ],
+    "oauth2Permissions": [
+        {
+            "adminConsentDescription": "Allows Teams to call the app's web APIs as the current user.",
+            "adminConsentDisplayName": "Teams can access app's web APIs",
+            "id": "{{state.fx-resource-aad-app-for-teams.oauth2PermissionScopeId}}",
+            "isEnabled": true,
+            "type": "User",
+            "userConsentDescription": "Enable Teams to call this app's web APIs with the same rights that you have",
+            "userConsentDisplayName": "Teams can access app's web APIs and make requests on your behalf",
+            "value": "access_as_user"
+        }
+    ],
+    "preAuthorizedApplications": [
+        {
+            "appId": "1fec8e78-bce4-4aaf-ab1b-5451cc387264",
+            "permissionIds": [
+                "{{state.fx-resource-aad-app-for-teams.oauth2PermissionScopeId}}"
+            ]
+        },
+        {
+            "appId": "5e3ce6c0-2b1f-4285-8d4b-75ee78787346",
+            "permissionIds": [
+                "{{state.fx-resource-aad-app-for-teams.oauth2PermissionScopeId}}"
+            ]
+        },
+        {
+            "appId": "d3590ed6-52b3-4102-aeff-aad2292ab01c",
+            "permissionIds": [
+                "{{state.fx-resource-aad-app-for-teams.oauth2PermissionScopeId}}"
+            ]
+        },
+        {
+            "appId": "00000002-0000-0ff1-ce00-000000000000",
+            "permissionIds": [
+                "{{state.fx-resource-aad-app-for-teams.oauth2PermissionScopeId}}"
+            ]
+        },
+        {
+            "appId": "bc59ab01-8403-45c6-8796-ac3ef710b3e3",
+            "permissionIds": [
+                "{{state.fx-resource-aad-app-for-teams.oauth2PermissionScopeId}}"
+            ]
+        },
+        {
+            "appId": "0ec893e0-5785-4de6-99da-4ed124e5296c",
+            "permissionIds": [
+                "{{state.fx-resource-aad-app-for-teams.oauth2PermissionScopeId}}"
+            ]
+        },
+        {
+            "appId": "4765445b-32c6-49b0-83e6-1d93765276ca",
+            "permissionIds": [
+                "{{state.fx-resource-aad-app-for-teams.oauth2PermissionScopeId}}"
+            ]
+        },
+        {
+            "appId": "4345a7b9-9a63-4910-a426-35363201d503",
+            "permissionIds": [
+                "{{state.fx-resource-aad-app-for-teams.oauth2PermissionScopeId}}"
+            ]
+        }
+    ],
+    "identifierUris": [
+        "{{state.fx-resource-aad-app-for-teams.applicationIdUris}}"
+    ],
+    "replyUrlsWithType": [
+        {
+            "url": "{{state.fx-resource-aad-app-for-teams.frontendEndpoint}}/auth-end.html",
+            "type": "Web"
+        },
+        {
+            "url": "{{state.fx-resource-aad-app-for-teams.frontendEndpoint}}/auth-end.html?clientId={{state.fx-resource-aad-app-for-teams.clientId}}",
+            "type": "Spa"
+        },
+        {
+            "url": "{{state.fx-resource-aad-app-for-teams.frontendEndpoint}}/blank-auth-end.html",
+            "type": "Spa"
+        }
+    ]
+}

package/templates/appPackage/manifest.template.json

@@ -0,0 +1,58 @@
+{
+    "$schema": "https://developer.microsoft.com/en-us/json-schemas/teams/v1.11/MicrosoftTeams.schema.json",
+    "manifestVersion": "1.11",
+    "version": "0.0.4",
+    "id": "{{state.fx-resource-appstudio.teamsAppId}}",
+    "packageName": "com.microsoft.teams.extension",
+    "developer": {
+        "name": "European Environment Agency",
+        "websiteUrl": "{{{state.fx-resource-frontend-hosting.endpoint}}}",
+        "privacyUrl": "{{{state.fx-resource-frontend-hosting.endpoint}}}/index.html#/privacy",
+        "termsOfUseUrl": "{{{state.fx-resource-frontend-hosting.endpoint}}}/index.html#/termsofuse"
+    },
+    "icons": {
+        "color": "resources/color.png",
+        "outline": "resources/outline.png"
+    },
+    "name": {
+        "short": "{{config.manifest.appName.short}}",
+        "full": "{{config.manifest.appName.full}}"
+    },
+    "description": {
+        "short": "Eionet Dashboard",
+        "full": "Available to all Eionet users and shows relevant country information & events and consultations"
+    },
+    "accentColor": "#FFFFFF",
+    "bots": [],
+    "composeExtensions": [],
+    "configurableTabs": [
+        {
+            "configurationUrl": "{{{state.fx-resource-frontend-hosting.endpoint}}}/index.html#/config",
+            "canUpdateConfiguration": true,
+            "scopes": [
+                "team",
+                "groupchat"
+            ]
+        }
+    ],
+    "staticTabs": [
+        {
+            "entityId": "dashboard",
+            "name": "Eionet2 Dashboard",
+            "contentUrl": "{{{state.fx-resource-frontend-hosting.endpoint}}}/index.html#/tab",
+            "websiteUrl": "{{{state.fx-resource-frontend-hosting.endpoint}}}/index.html#/tab",
+            "scopes": [
+                "personal"
+            ]
+        }
+    ],
+    "permissions": [
+        "identity",
+        "messageTeamMembers"
+    ],
+    "validDomains": [],
+    "webApplicationInfo": {
+        "id": "{{state.fx-resource-aad-app-for-teams.clientId}}",
+        "resource": "{{{state.fx-resource-aad-app-for-teams.applicationIdUris}}}"
+    }
+}

package/templates/azure/config.bicep

@@ -0,0 +1,27 @@
+@secure()
+param provisionParameters object
+param provisionOutputs object
+var simpleAuthCurrentAppSettings = list('${provisionOutputs.simpleAuthOutput.value.webAppResourceId}/config/appsettings', '2021-02-01').properties
+
+module teamsFxSimpleAuthConfig './teamsFx/simpleAuth.bicep' = {
+  name: 'addTeamsFxSimpleAuthConfiguration'
+  params: {
+    provisionParameters: provisionParameters
+    provisionOutputs: provisionOutputs
+    currentAppSettings: simpleAuthCurrentAppSettings
+  }
+}
+// Get existing app settings and site config for merge
+var functionCurrentConfigs = reference('${provisionOutputs.functionOutput.value.functionAppResourceId}/config/web', '2021-02-01')
+var functionCurrentAppSettings = list('${provisionOutputs.functionOutput.value.functionAppResourceId}/config/appsettings', '2021-02-01').properties
+
+// Merge TeamsFx configurations to Azure Functions resources
+module teamsFxFunctionConfig './teamsFx/function.bicep' = {
+  name: 'addTeamsFxFunctionConfiguration'
+  params: {
+    provisionParameters: provisionParameters
+    provisionOutputs: provisionOutputs
+    currentConfigs: functionCurrentConfigs
+    currentAppSettings: functionCurrentAppSettings
+  }
+}

package/templates/azure/main.bicep

@@ -0,0 +1,20 @@
+@secure()
+param provisionParameters object
+
+module provision './provision.bicep' = {
+  name: 'provisionResources'
+  params: {
+    provisionParameters: provisionParameters
+  }
+}
+
+module teamsFxConfig './config.bicep' = {
+  name: 'addTeamsFxConfigurations'
+  params: {
+    provisionParameters: provisionParameters
+    provisionOutputs: provision
+  }
+}
+
+output provisionOutput object = provision
+output teamsFxConfigurationOutput object = contains(reference(resourceId('Microsoft.Resources/deployments', teamsFxConfig.name), '2020-06-01'), 'outputs') ? teamsFxConfig : {}

package/templates/azure/provision/frontendHosting.bicep

@@ -0,0 +1,23 @@
+@secure()
+param provisionParameters object
+var resourceBaseName = provisionParameters.resourceBaseName
+var storageName = contains(provisionParameters, 'frontendHostingStorageName') ? provisionParameters['frontendHostingStorageName'] : '${resourceBaseName}tab'
+var storageSku = contains(provisionParameters, 'frontendHostingStorageSku') ? provisionParameters['frontendHostingStorageSku'] : 'Standard_LRS'
+
+resource storage 'Microsoft.Storage/storageAccounts@2021-06-01' = {
+  kind: 'StorageV2'
+  location: resourceGroup().location
+  name: storageName
+  properties: {
+    supportsHttpsTrafficOnly: true
+  }
+  sku: {
+    name: storageSku // You can follow https://aka.ms/teamsfx-bicep-add-param-tutorial to add frontendHostingStorageSku property to provisionParameters to override the default value "Standard_LRS".
+  }
+}
+
+var siteDomain = replace(replace(storage.properties.primaryEndpoints.web, 'https://', ''), '/', '')
+
+output resourceId string = storage.id
+output endpoint string = 'https://${siteDomain}'
+output domain string = siteDomain

package/templates/azure/provision/function.bicep

@@ -0,0 +1,82 @@
+@secure()
+param provisionParameters object
+param userAssignedIdentityId string
+
+var resourceBaseName = provisionParameters.resourceBaseName
+var serverfarmsName = contains(provisionParameters, 'functionServerfarmsName') ? provisionParameters['functionServerfarmsName'] : '${resourceBaseName}api' // Try to read name for App Service Plan from parameters
+var serverfarmsSku = contains(provisionParameters, 'functionServerfarmsSku') ? provisionParameters['functionServerfarmsSku'] : 'Y1' // Try to read SKU for App Service Plan from parameters
+var functionAppName = contains(provisionParameters, 'functionWebappName') ? provisionParameters['functionWebappName'] : '${resourceBaseName}api' // Try to read name for Azure Functions from parameters
+var storageName = contains(provisionParameters, 'functionStorageName') ? provisionParameters['functionStorageName'] : '${resourceBaseName}api' // Try to read name for Azure Storage from parameters
+var storageSku = contains(provisionParameters, 'functionStorageSku') ? provisionParameters['functionStorageSku'] : 'Standard_LRS' // Try to read SKU for Azure Storage from parameters
+
+// Compute resources for Azure Functions
+resource serverfarms 'Microsoft.Web/serverfarms@2021-02-01' = {
+  name: serverfarmsName
+  kind: 'functionapp'
+  location: resourceGroup().location
+  sku: {
+    name: serverfarmsSku // You can follow https://aka.ms/teamsfx-bicep-add-param-tutorial to add functionServerfarmsSku property to provisionParameters to override the default value "Y1".
+  }
+}
+
+// Azure Functions that hosts your function code
+resource functionApp 'Microsoft.Web/sites@2021-02-01' = {
+  name: functionAppName
+  kind: 'functionapp'
+  location: resourceGroup().location
+  properties: {
+    serverFarmId: serverfarms.id
+    keyVaultReferenceIdentity: userAssignedIdentityId // Use given user assigned identity to access Key Vault
+    siteConfig: {
+      appSettings: [
+        {
+          name: 'AzureWebJobsDashboard'
+          value: 'DefaultEndpointsProtocol=https;AccountName=${storage.name};AccountKey=${listKeys(storage.id, storage.apiVersion).keys[0].value};EndpointSuffix=${environment().suffixes.storage}' // Azure Functions internal setting
+        }
+        {
+          name: 'AzureWebJobsStorage'
+          value: 'DefaultEndpointsProtocol=https;AccountName=${storage.name};AccountKey=${listKeys(storage.id, storage.apiVersion).keys[0].value};EndpointSuffix=${environment().suffixes.storage}' // Azure Functions internal setting
+        }
+        {
+          name: 'FUNCTIONS_EXTENSION_VERSION'
+          value: '~3' // Use Azure Functions runtime v3
+        }
+        {
+          name: 'FUNCTIONS_WORKER_RUNTIME'
+          value: 'node' // Set runtime to NodeJS
+        }
+        {
+          name: 'WEBSITE_CONTENTAZUREFILECONNECTIONSTRING'
+          value: 'DefaultEndpointsProtocol=https;AccountName=${storage.name};AccountKey=${listKeys(storage.id, storage.apiVersion).keys[0].value};EndpointSuffix=${environment().suffixes.storage}' // Azure Functions internal setting
+        }
+        {
+          name: 'WEBSITE_RUN_FROM_PACKAGE'
+          value: '1' // Run Azure Functions from a package file
+        }
+        {
+          name: 'WEBSITE_NODE_DEFAULT_VERSION'
+          value: '~14' // Set NodeJS version to 14.x
+        }
+      ]
+    }
+  }
+  identity: {
+    type: 'UserAssigned'
+    userAssignedIdentities: {
+      '${userAssignedIdentityId}': {} // The identity is used to access other Azure resources
+    }
+  }
+}
+
+// Azure Storage is required when creating Azure Functions instance
+resource storage 'Microsoft.Storage/storageAccounts@2021-06-01' = {
+  name: storageName
+  kind: 'StorageV2'
+  location: resourceGroup().location
+  sku: {
+    name: storageSku // You can follow https://aka.ms/teamsfx-bicep-add-param-tutorial to add functionStorageSku property to provisionParameters to override the default value "Standard_LRS".
+  }
+}
+
+output functionEndpoint string = 'https://${functionApp.properties.defaultHostName}'
+output functionAppResourceId string = functionApp.id

package/templates/azure/provision/identity.bicep

@@ -0,0 +1,14 @@
+@secure()
+param provisionParameters object
+var resourceBaseName = provisionParameters.resourceBaseName
+var identityName = contains(provisionParameters, 'userAssignedIdentityName') ? provisionParameters['userAssignedIdentityName'] : '${resourceBaseName}'
+
+resource managedIdentity 'Microsoft.ManagedIdentity/userAssignedIdentities@2018-11-30' = {
+  name: identityName
+  location: resourceGroup().location
+}
+
+output identityName string = identityName
+output identityClientId string = managedIdentity.properties.clientId
+output identityResourceId string = managedIdentity.id
+output identityPrincipalId string = managedIdentity.properties.principalId

package/templates/azure/provision/simpleAuth.bicep

@@ -0,0 +1,44 @@
+@secure()
+param provisionParameters object
+param userAssignedIdentityId string
+var resourceBaseName = provisionParameters.resourceBaseName
+var sku = contains(provisionParameters, 'simpleAuthSku') ? provisionParameters['simpleAuthSku'] : 'F1'
+var serverFarmsName = contains(provisionParameters, 'simpleAuthServerFarmsName') ? provisionParameters['simpleAuthServerFarmsName'] : '${resourceBaseName}simpleAuth'
+var webAppName = contains(provisionParameters, 'simpleAuthWebAppName') ? provisionParameters['simpleAuthWebAppName'] : '${resourceBaseName}simpleAuth'
+var simpleAuthPackageUri = contains(provisionParameters, 'simpleAuthPackageUri') ? provisionParameters['simpleAuthPackageUri'] : 'https://github.com/OfficeDev/TeamsFx/releases/download/simpleauth@0.1.0/Microsoft.TeamsFx.SimpleAuth_0.1.0.zip'
+
+resource serverFarms 'Microsoft.Web/serverfarms@2021-02-01' = {
+  name: serverFarmsName
+  location: resourceGroup().location
+  sku: {
+    name: sku
+  }
+  kind: 'app'
+}
+
+resource webApp 'Microsoft.Web/sites@2021-02-01' = {
+  kind: 'app'
+  name: webAppName
+  location: resourceGroup().location
+  properties: {
+    serverFarmId: serverFarms.id
+    keyVaultReferenceIdentity: userAssignedIdentityId
+  }
+  identity: {
+    type: 'UserAssigned'
+    userAssignedIdentities: {
+      '${userAssignedIdentityId}': {}
+    }
+  }
+}
+
+resource simpleAuthDeploy 'Microsoft.Web/sites/extensions@2021-02-01' = {
+  parent: webApp
+  name: 'MSDeploy'
+  properties: {
+    packageUri: simpleAuthPackageUri
+  }
+}
+
+output webAppResourceId string = webApp.id
+output endpoint string = 'https://${webApp.properties.defaultHostName}'

package/templates/azure/provision.bicep

@@ -0,0 +1,58 @@
+@secure()
+param provisionParameters object
+// Resources for frontend hosting
+module frontendHostingProvision './provision/frontendHosting.bicep' = {
+  name: 'frontendHostingProvision'
+  params: {
+    provisionParameters: provisionParameters
+  }
+}
+
+output frontendHostingOutput object = {
+  teamsFxPluginId: 'fx-resource-frontend-hosting'
+  domain: frontendHostingProvision.outputs.domain
+  endpoint: frontendHostingProvision.outputs.endpoint
+  storageResourceId: frontendHostingProvision.outputs.resourceId
+}
+// Resources for identity
+module userAssignedIdentityProvision './provision/identity.bicep' = {
+  name: 'userAssignedIdentityProvision'
+  params: {
+    provisionParameters: provisionParameters
+  }
+}
+
+output identityOutput object = {
+  teamsFxPluginId: 'fx-resource-identity'
+  identityName: userAssignedIdentityProvision.outputs.identityName
+  identityResourceId: userAssignedIdentityProvision.outputs.identityResourceId
+  identityClientId: userAssignedIdentityProvision.outputs.identityClientId
+}
+// Resources for Simple Auth
+module simpleAuthProvision './provision/simpleAuth.bicep' = {
+  name: 'simpleAuthProvision'
+  params: {
+    provisionParameters: provisionParameters
+    userAssignedIdentityId: userAssignedIdentityProvision.outputs.identityResourceId
+  }
+}
+
+output simpleAuthOutput object = {
+  teamsFxPluginId: 'fx-resource-simple-auth'
+  endpoint: simpleAuthProvision.outputs.endpoint
+  webAppResourceId: simpleAuthProvision.outputs.webAppResourceId
+}
+// Resources for Azure Functions
+module functionProvision './provision/function.bicep' = {
+  name: 'functionProvision'
+  params: {
+    provisionParameters: provisionParameters
+    userAssignedIdentityId: userAssignedIdentityProvision.outputs.identityResourceId
+  }
+}
+
+output functionOutput object = {
+  teamsFxPluginId: 'fx-resource-function'
+  functionAppResourceId: functionProvision.outputs.functionAppResourceId
+  functionEndpoint: functionProvision.outputs.functionEndpoint
+}

package/templates/azure/teamsFx/function.bicep

@@ -0,0 +1,76 @@
+// Auto generated content, please customize files under provision folder
+
+@secure()
+param provisionParameters object
+param provisionOutputs object
+@secure()
+param currentConfigs object
+@secure()
+param currentAppSettings object
+
+var functionAppName = split(provisionOutputs.functionOutput.value.functionAppResourceId, '/')[8]
+
+var m365ClientId = provisionParameters['m365ClientId']
+
+var m365ClientSecret = provisionParameters['m365ClientSecret']
+
+var m365TenantId = provisionParameters['m365TenantId']
+var m365OauthAuthorityHost = provisionParameters['m365OauthAuthorityHost']
+var oauthAuthority = uri(m365OauthAuthorityHost, m365TenantId)
+
+var tabAppDomain = provisionOutputs.frontendHostingOutput.value.domain
+var tabAppEndpoint = provisionOutputs.frontendHostingOutput.value.endpoint
+
+
+var m365ApplicationIdUri = 'api://${tabAppDomain}/${m365ClientId}'
+
+var teamsMobileOrDesktopAppClientId = '1fec8e78-bce4-4aaf-ab1b-5451cc387264'
+var teamsWebAppClientId = '5e3ce6c0-2b1f-4285-8d4b-75ee78787346'
+var officeWebAppClientId1 = '4345a7b9-9a63-4910-a426-35363201d503'
+var officeWebAppClientId2 = '4765445b-32c6-49b0-83e6-1d93765276ca'
+var officeDesktopAppClientId = '0ec893e0-5785-4de6-99da-4ed124e5296c'
+var outlookDesktopAppClientId = 'd3590ed6-52b3-4102-aeff-aad2292ab01c'
+var outlookWebAppClientId1 = '00000002-0000-0ff1-ce00-000000000000'
+var outlookWebAppClientId2 = 'bc59ab01-8403-45c6-8796-ac3ef710b3e3'
+var authorizedClientApplicationIds = '${teamsMobileOrDesktopAppClientId};${teamsWebAppClientId};${officeWebAppClientId1};${officeWebAppClientId2};${officeDesktopAppClientId};${outlookDesktopAppClientId};${outlookWebAppClientId1};${outlookWebAppClientId2}'
+
+var currentAllowedOrigins = empty(currentConfigs.cors) ? [] : currentConfigs.cors.allowedOrigins
+
+resource appConfig 'Microsoft.Web/sites/config@2021-02-01' = {
+  name: '${functionAppName}/web'
+  kind: 'functionapp'
+  properties: {
+    cors: {
+      allowedOrigins: union(currentAllowedOrigins, [
+        tabAppEndpoint // allow requests from tab app
+      ])
+    }
+  }
+}
+resource appSettings 'Microsoft.Web/sites/config@2021-02-01' = {
+  name: '${functionAppName}/appsettings'
+  properties: union({
+    API_ENDPOINT: provisionOutputs.functionOutput.value.functionEndpoint // Azure Functions endpoint
+    ALLOWED_APP_IDS: authorizedClientApplicationIds // Only allow tokens issued by these AAD applications
+    M365_CLIENT_ID: m365ClientId // Client id of AAD application
+    M365_CLIENT_SECRET: m365ClientSecret // Client secret of AAD application
+    M365_TENANT_ID: m365TenantId // Tenant id of AAD application
+    M365_AUTHORITY_HOST: m365OauthAuthorityHost // AAD authority host
+    M365_APPLICATION_ID_URI: m365ApplicationIdUri // Application ID URI of AAD application
+    IDENTITY_ID: provisionOutputs.identityOutput.value.identityClientId // User assigned identity id, the identity is used to access other Azure resources
+  }, currentAppSettings) // Merge new settings with existing settings
+}
+
+resource authSettings 'Microsoft.Web/sites/config@2021-02-01' = {
+  name: '${functionAppName}/authsettings'
+  properties: {
+    enabled: true // Validate access token in request authorization header
+    defaultProvider: 'AzureActiveDirectory'
+    clientId: m365ClientId
+    issuer: '${oauthAuthority}/v2.0' // Issuer of access token
+    allowedAudiences: [ // Only allow tokens with following audiences
+      m365ClientId
+      m365ApplicationIdUri
+    ]
+  }
+}