fix(microsoft-excel): decide SharePoint site discovery consent model

Abierto
  • ¿Algo no está bien?
#7,197 1 comentario 0 reacciones 0 asignados Ver en GitHub

Los mantenedores suelen responder en 1 día

@Zoymusk ya está trabajando en esto.

Desde el 19/9/2026.

Evaluación

Dificultad
5/5
Tiempo estimado
Más de una semana
Aptitud para principiantes
35/100
Tipo de issue
Nueva funcionalidad
Claridad
Bastante claro
Estado de actividad
Activo
Stack tecnológico
typescript
Área
api, authentication, authorization

Línea de trabajo

Start by tracing the Excel OAuth consent and SharePoint site selector credential-binding paths, then review the focused permission/binding tests and Microsoft Graph site-search requirements. Done means the supported credential model is documented and implemented consistently, unsupported credentials show a clear product-level error, live work-or-school validation is covered, and existing Excel file operations still work.

Escrito por el modelo de indexación a partir del texto del issue.

Descripción

Summary

Microsoft Excel credentials can now be recognized by the SharePoint site selector, but the existing Excel OAuth consent does not authorize Microsoft Graph site search.

Graph site search requires Sites.Read.All. Sim’s Excel connection currently requests file permissions only, so an ordinary existing Excel credential should be expected to receive a 403. The endpoint also does not support delegated personal Microsoft accounts.

This is a pre-existing consent-model limitation, not a selector transport or credential-binding bug.

Decision needed

Choose and implement one supported model:

  1. Add Sites.Read.All to the standard Excel consent and require existing users to reconnect/reconsent.
  2. Add conditional or incremental consent when SharePoint site discovery is requested.
  3. Require a separate SharePoint credential for site discovery and narrow the Excel selector compatibility accordingly.

The decision should account for least privilege, reconnect UX, existing credentials, and personal-account behavior.

Acceptance criteria

  • The supported Excel/SharePoint credential model is documented.
  • OAuth scopes, reconnect/reconsent behavior, and selector credential binding agree.
  • Unsupported credentials receive a clear product-level error.
  • Focused permission/binding tests and live work-or-school tenant validation are added.
  • Existing Excel file operations continue to work.

Reference

Microsoft Graph site search requires Sites.Read.All and does not support delegated personal Microsoft accounts:

https://learn.microsoft.com/en-us/graph/api/site-search?tabs=http&view=graph-rest-1.0

Lenguaje dominante
TypeScript
Estrellas
29.8k
Forks
3.9k
Merge medio
1 h 44 min
PR fusionados (30 d)
841

Preparar el entorno

Este proyecto no incluye contenedor de desarrollo, Dockerfile ni guía de contribución, así que la configuración corre por tu cuenta: empieza por su README y consulta nuestra guía para la primera contribución para los pasos generales.

Primeros pasos

  1. Lee el issue completo y luego la guía de contribución del proyecto.
  2. Comenta en el issue que vas a ocuparte — evita que dos personas hagan lo mismo.
  3. Haz un fork del repositorio y trabaja en una rama.
  4. Abre un pull request que haga referencia al número del issue.

Más de simstudioai/sim

Todos los issues de simstudioai/sim

Issues similares

Más issues de TypeScript

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.