2024-05-15: Authentication improvements for public documents
This release adds new environment variables for more flexibility when using user authentication and user access control. Here is the updated section of the documentation about authentication section:
- (Optional) To require access control when using the app, run
azd env set AZURE_ENFORCE_ACCESS_CONTROL true
. Authentication is always required to search on documents with access control assigned, regardless of if unauthenticated access is enabled or not. - (Optional) To allow authenticated users to search on documents that have no access controls assigned, even when access control is required, run
azd env set AZURE_ENABLE_GLOBAL_DOCUMENT_ACCESS true
. - (Optional) To allow unauthenticated users to use the app, even when access control is enforced, run
azd env set AZURE_ENABLE_UNAUTHENTICATED_ACCESS true
.AZURE_ENABLE_GLOBAL_DOCUMENT_ACCESS
should also be set to true if you want unauthenticated users to be able to search on documents with no access control.
See the full steps here:
https://github.com/Azure-Samples/azure-search-openai-demo/blob/main/docs/login_and_acl.md#automatic-setup
Please file issues if you see any problems with the new capabilities.
What's Changed
- Add note about OPENAI_HOST and azd deployment by @pamelafox in #1479
- Update customization.md - fix broken doc links by @tamram in #1592
- Add roles descriptions to roles.sh by @cedricvidal in #1583
- Escape single quote marks for search filters by @pamelafox in #1599
- Updating load balancing instructions by @andredewes in #1598
- Allow public documents when authentication is enabled by @mattgotteiner in #1576
New Contributors
- @tamram made their first contribution in #1592
- @cedricvidal made their first contribution in #1583
Full Changelog: 2024-04-25...2024-05-15