From 5373fe562a5740a91176bed2582251678d9b9c90 Mon Sep 17 00:00:00 2001
From: Jerry Phillips <jerry.daniel.phillips@gmail.com>
Date: Sat, 28 Mar 2026 21:22:56 -0400
Subject: [PATCH] fix(auth): Fix Actions Auth

---
 .github/workflows/master_jobflow-api.yml  |  9 +--------
 .github/workflows/staging_jobflow-api.yml | 18 ++----------------
 2 files changed, 3 insertions(+), 24 deletions(-)

diff --git a/.github/workflows/master_jobflow-api.yml b/.github/workflows/master_jobflow-api.yml
index 72a3e89..dd486a0 100644
--- a/.github/workflows/master_jobflow-api.yml
+++ b/.github/workflows/master_jobflow-api.yml
@@ -45,7 +45,6 @@ jobs:
       url: ${{ steps.deploy-to-webapp.outputs.webapp-url }}
 
     permissions:
-      id-token: write
       contents: read
 
     steps:
@@ -55,17 +54,11 @@ jobs:
           name: dotnet-app
           path: .
 
-      - name: Azure Login
-        uses: azure/login@v2
-        with:
-          client-id: ${{ secrets.AZUREAPPSERVICE_CLIENTID_15A959992577476DBE8A0461C48B98E2 }}
-          tenant-id: ${{ secrets.AZUREAPPSERVICE_TENANTID_0D7B12FDA6784264AD6F6B11A9FD4D54 }}
-          subscription-id: ${{ secrets.AZUREAPPSERVICE_SUBSCRIPTIONID_9763D46E278F4180A2B5D8CC4B8B9E88 }}
-
       - name: Deploy to Azure Web App
         id: deploy-to-webapp
         uses: azure/webapps-deploy@v3
         with:
           app-name: jobflow-api
           slot-name: Production
+          publish-profile: ${{ secrets.AZURE_WEBAPP_PUBLISH_PROFILE_PROD }}
           package: .
diff --git a/.github/workflows/staging_jobflow-api.yml b/.github/workflows/staging_jobflow-api.yml
index 95efaa8..7f74b43 100644
--- a/.github/workflows/staging_jobflow-api.yml
+++ b/.github/workflows/staging_jobflow-api.yml
@@ -39,7 +39,6 @@ jobs:
       name: 'Staging'
       url: ${{ steps.deploy-to-webapp.outputs.webapp-url }}
     permissions:
-      id-token: write
       contents: read
 
     steps:
@@ -48,19 +47,13 @@ jobs:
         with:
           name: .net-app
 
-      - name: Login to Azure
-        uses: azure/login@v2
-        with:
-          client-id: ${{ secrets.AZUREAPPSERVICE_CLIENTID_15A959992577476DBE8A0461C48B98E2 }}
-          tenant-id: ${{ secrets.AZUREAPPSERVICE_TENANTID_0D7B12FDA6784264AD6F6B11A9FD4D54 }}
-          subscription-id: ${{ secrets.AZUREAPPSERVICE_SUBSCRIPTIONID_9763D46E278F4180A2B5D8CC4B8B9E88 }}
-
       - name: Deploy to Azure Web App
         id: deploy-to-webapp
         uses: azure/webapps-deploy@v3
         with:
           app-name: 'jobflow-api-staging'
           slot-name: 'Production'
+          publish-profile: ${{ secrets.AZURE_WEBAPP_PUBLISH_PROFILE_STAGING }}
           package: .
 
   deploy-prod:
@@ -70,7 +63,6 @@ jobs:
       name: 'Production'
       url: ${{ steps.deploy-to-webapp.outputs.webapp-url }}
     permissions:
-      id-token: write
       contents: read
 
     steps:
@@ -79,17 +71,11 @@ jobs:
         with:
           name: .net-app
 
-      - name: Login to Azure
-        uses: azure/login@v2
-        with:
-          client-id: ${{ secrets.AZUREAPPSERVICE_CLIENTID_15A959992577476DBE8A0461C48B98E2 }}
-          tenant-id: ${{ secrets.AZUREAPPSERVICE_TENANTID_0D7B12FDA6784264AD6F6B11A9FD4D54 }}
-          subscription-id: ${{ secrets.AZUREAPPSERVICE_SUBSCRIPTIONID_9763D46E278F4180A2B5D8CC4B8B9E88 }}
-
       - name: Deploy to Azure Web App (prod)
         id: deploy-to-webapp
         uses: azure/webapps-deploy@v3
         with:
           app-name: 'jobflow-api'
           slot-name: 'Production'
+          publish-profile: ${{ secrets.AZURE_WEBAPP_PUBLISH_PROFILE_PROD }}
           package: .