Replace Windows Live authentication with Microsoft

[niemyjski]

Summary

• replace the deprecated Windows Live API and both login UIs with Microsoft Identity Platform v2 and Microsoft Graph through the OAuth2 library's MicrosoftClient
• add the modern Microsoft identity first, then remove a stored WindowsLive identity only after a successful Microsoft response for the authenticated user, an existing modern identity, or an exact-email match
• remove the bundled legacy client ID, retain blank MicrosoftId configuration slots, and expose the renamed public client-ID constant without logging OAuth secret values

This intentionally does not change self-hosting documentation, Kubernetes values, Docker Compose samples, the vendored Satellizer library, or unrelated HTTP samples.

Migration behavior

• Microsoft Graph IDs are not compatible with Windows Live IDs, so there is no bulk ID rewrite
• an authenticated account-link operation updates that user even when Microsoft returns a different email address
• an unauthenticated sign-in reuses an existing modern identity or exact-email match
• an unmatched unauthenticated email creates a separate user and leaves the legacy user unchanged
• provider failures do not modify stored identities

Microsoft setup

1. Create a Microsoft Entra app registration that supports accounts in any organizational directory and personal Microsoft accounts.
2. Register each Exceptionless UI origin as a Web redirect URI. The redirect URI is window.location.origin, so it must match the deployed origin exactly.
3. Add delegated Microsoft Graph User.Read and create a client secret.
4. Configure MicrosoftId=<client-id>;MicrosoftSecret=<secret>; in EX_ConnectionStrings__OAuth.

The server uses the OAuth2 library's Microsoft client: https://github.com/titarenko/OAuth2

Breaking changes

• removes POST /api/v2/auth/live and replaces it with POST /api/v2/auth/microsoft
• removes the bundled legacy Windows Live client ID; Microsoft login stays hidden until a new app registration is configured

Verification

• dotnet build --no-restore: 0 warnings, 0 errors
• focused authentication and API contract tests after merging current main: 56 passed
• Svelte validation: 0 errors and 0 warnings; unit tests: 326 passed; production build passed
• Angular lint and production build passed on Node 22
• both packaged config scripts were exercised with a fake client ID and secret; the client ID was emitted and the secret was not

Live Microsoft consent and callback verification remains pending a real client ID and secret.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 68278822f5

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 716f6d7911

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-11T14:54:12.305207Z	fc0f025	New commits

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[github-actions]

Package	Line Rate	Branch Rate	Complexity	Health
Exceptionless.Insulation	37%	35%	286	❌
Exceptionless.Web	85%	70%	8114	✔
Exceptionless.Core	76%	68%	10497	✔
Exceptionless.AppHost	38%	41%	147	❌
Summary	79% (26340 / 33354)	68% (12232 / 18015)	19044	✔