From c127c308dd6ce9527157dd06fb6a1f601cff2d44 Mon Sep 17 00:00:00 2001
From: Niek Rabelink <niek.rabelink@gmail.com>
Date: Tue, 8 Sep 2026 19:46:15 +0200
Subject: [PATCH] feat: kopieerbare v2.0 admin consent link voor IT-beheerders
 toegevoegd

---
 integrations.php | 23 ++++++++++++++++-------
 1 file changed, 16 insertions(+), 7 deletions(-)

diff --git a/integrations.php b/integrations.php
index 551efb4..e8fd4d1 100644
--- a/integrations.php
+++ b/integrations.php
@@ -315,7 +315,7 @@ $redirectUri = rtrim(APP_URL, '/') . '/auth/callback_microsoft.php';
                         $curClientId = !empty($outlookSettings['client_id']) ? $outlookSettings['client_id'] : fociz_env('MICROSOFT_CLIENT_ID', '');
                         $curTenantId = !empty($outlookSettings['tenant_id']) ? $outlookSettings['tenant_id'] : 'organizations';
                         if (!empty($curClientId)): 
-                            $adminConsentUrl = "https://login.microsoftonline.com/" . urlencode($curTenantId) . "/adminconsent?client_id=" . urlencode($curClientId) . "&redirect_uri=" . urlencode($redirectUri);
+                            $adminConsentUrl = "https://login.microsoftonline.com/" . urlencode($curTenantId) . "/v2.0/adminconsent?client_id=" . urlencode($curClientId) . "&redirect_uri=" . urlencode($redirectUri) . "&scope=" . urlencode("https://graph.microsoft.com/.default");
                         ?>
                         <div class="mt-2 pt-2 border-t border-slate-800/80">
                             <a href="<?= htmlspecialchars($adminConsentUrl) ?>" target="_blank" class="inline-flex items-center space-x-1.5 text-[11px] text-amber-400 hover:text-amber-300 underline font-semibold">
@@ -390,16 +390,25 @@ $redirectUri = rtrim(APP_URL, '/') . '/auth/callback_microsoft.php';
                     $curClientId = !empty($outlookSettings['client_id']) ? $outlookSettings['client_id'] : fociz_env('MICROSOFT_CLIENT_ID', '');
                     $curTenantId = !empty($outlookSettings['tenant_id']) ? $outlookSettings['tenant_id'] : 'organizations';
                     if (!empty($curClientId)): 
-                        $adminConsentUrl = "https://login.microsoftonline.com/" . urlencode($curTenantId) . "/adminconsent?client_id=" . urlencode($curClientId) . "&redirect_uri=" . urlencode($redirectUri);
+                        $adminConsentUrl = "https://login.microsoftonline.com/" . urlencode($curTenantId) . "/v2.0/adminconsent?client_id=" . urlencode($curClientId) . "&redirect_uri=" . urlencode($redirectUri) . "&scope=" . urlencode("https://graph.microsoft.com/.default");
                     ?>
                     <div class="mt-2 p-2.5 rounded-lg bg-amber-500/10 border border-amber-500/30 text-[11px] flex items-start space-x-2">
                         <i data-lucide="shield-alert" class="w-4 h-4 flex-shrink-0 mt-0.5 text-amber-400"></i>
-                        <div class="text-slate-300 leading-snug">
+                        <div class="text-slate-300 leading-snug flex-1">
                             <strong class="text-amber-300 block">Krijgt u "Beheerdersgoedkeuring vereist"?</strong>
-                            <span>In Azure staat de goedkeuring standaard op 'Niet verleend'. Open deze directe link als beheerder om het met 1 klik goed te keuren:</span><br>
-                            <a href="<?= htmlspecialchars($adminConsentUrl) ?>" target="_blank" class="inline-flex items-center space-x-1 font-bold text-amber-400 hover:text-white underline mt-1">
-                                <span>Beheerdersgoedkeuring direct verlenen via Microsoft &rarr;</span>
-                            </a>
+                            <span>Stuur deze officiële Microsoft goedkeuringslink naar uw IT-beheerder om Fociz met 1 klik goed te keuren voor <?= htmlspecialchars($curTenantId) ?>:</span>
+                            <div class="mt-2 flex items-center space-x-2">
+                                <input type="text" readonly id="adminConsentInput" value="<?= htmlspecialchars($adminConsentUrl) ?>" class="bg-slate-950/80 border border-slate-800 rounded px-2 py-1 text-[10px] text-amber-300 font-mono flex-1 focus:outline-none select-all">
+                                <button type="button" onclick="copyToClipboard('adminConsentInput')" class="bg-amber-500/20 hover:bg-amber-500/30 border border-amber-500/40 text-amber-300 text-[10px] font-semibold px-2 py-1 rounded transition flex items-center space-x-1 flex-shrink-0">
+                                    <i data-lucide="copy" class="w-3 h-3"></i>
+                                    <span>Kopieer Link</span>
+                                </button>
+                            </div>
+                            <div class="mt-1.5">
+                                <a href="<?= htmlspecialchars($adminConsentUrl) ?>" target="_blank" class="inline-flex items-center space-x-1 font-bold text-amber-400 hover:text-white underline">
+                                    <span>Zelf beheerder? Open de goedkeuring direct &rarr;</span>
+                                </a>
+                            </div>
                         </div>
                     </div>
                     <?php endif; ?>