Separate reference docs into different block

README.md

@@ -170,6 +170,12 @@ Once in the web app:
 * Explore citations and sources
 * Click on the "settings" icon to try different options, tweak prompts, etc.
 
+### Optional: Enabling Authentication
+
+By default, the deployed Azure container app will have no authentication or access restrictions enabled, meaning anyone with routable network access to the container app can chat with your indexed data.  You can require authentication to your Azure Active Directory by following the [Add container app authentication](https://learn.microsoft.com/en-us/azure/container-apps/authentication-azure-active-directory) tutorial and set it up against the deployed container app.
+
+To then limit access to a specific set of users or groups, you can follow the steps from [Restrict your Azure AD app to a set of users](https://learn.microsoft.com/azure/active-directory/develop/howto-restrict-your-app-to-a-set-of-users) by changing "Assignment Required?" option under the Enterprise Application, and then assigning users/groups access.  Users not granted explicit access will receive the error message -AADSTS50105: Your administrator has configured the application <app_name> to block users unless they are specifically granted ('assigned') access to the application.-
+
 ## Resources
 
 * [Revolutionize your Enterprise Data with ChatGPT: Next-gen Apps w/ Azure OpenAI and Cognitive Search](https://aka.ms/entgptsearchblog)

app/backend/Program.cs

@@ -4,6 +4,8 @@
 
 builder.Configuration.ConfigureAzureKeyVault();
 
+var allowMSIdentity = "_myAllowSpecificOrigins";
+
 // See: https://aka.ms/aspnetcore/swashbuckle
 builder.Services.AddEndpointsApiExplorer();
 builder.Services.AddSwaggerGen();
@@ -47,6 +49,20 @@
             """;
         options.InstanceName = "content";
     });
+
+    builder.Services.AddCors(options =>
+    {
+        options.AddPolicy(name: allowMSIdentity,
+                          policy =>
+                          {
+                              // add login.windows.net and login.microsoftonline.com
+                              policy.WithOrigins("https://login.microsoftonline.com",
+                                                 "https://login.windows.net")
+                                    .AllowAnyHeader()
+                                    .AllowAnyMethod()
+                                    .AllowCredentials();
+                          });
+    });
 }
 
 var app = builder.Build();
@@ -62,9 +78,11 @@
     app.UseHsts();
 }
 
+
+
 app.UseHttpsRedirection();
 app.UseOutputCache();
-app.UseCors();
+app.UseCors(allowMSIdentity);
 app.UseBlazorFrameworkFiles();
 app.UseStaticFiles();
 app.UseRouting();

app/backend/Services/ReadRetrieveReadChatService.cs

@@ -112,7 +112,7 @@ standard plan AND dental AND employee benefit.
 
 You answer needs to be a json object with the following format.
 {{
-    ""answer"": // the answer to the question, add a source reference to the end of each sentence. e.g. Apple is a fruit [reference1.pdf]. If no source available, put the answer as I don't know.
+    ""answer"": // the answer to the question, add a source reference to the end of each sentence. e.g. Apple is a fruit [reference1.pdf][reference2.pdf]. If no source available, put the answer as I don't know.
     ""thoughts"": // brief thoughts on how you came up with the answer, e.g. what sources you used, what you thought about, etc.
 }}");