finos / spring-bot

Spring Boot + Java Integration for Symphony/Teams Chat Platform Bots and Apps
https://springbot.finos.org
Apache License 2.0
60 stars 35 forks source link

Single Tennant For Teams #396

Open robmoffat opened 1 year ago

robmoffat commented 1 year ago

Microsoft supports the single tennant model for C# and Javascript. However, other platforms including Java only have Multi-tennant support.

The problem with this is that potentially anyone on the internet can access the bot and use it to send messages.

In order to prevent this, extra code would need to be added to any Spring-Bot bot to make it single tennant.

DB suggest that using a multi-tennant account might be a problem, and this might need. to be changed.

robmoffat commented 10 months ago

On point 1, this is being done. On point 2, single Tennant bot doesn't work - Microsoft doesn't allow this. @vaibhav-db to try and uncover the email explaining why!