update docs

CLAUDE.md

@@ -6,7 +6,7 @@ This file provides guidance to Claude Code (claude.ai/code) when working with co
 
 DevDen is a self-hosted AI chat platform that enables organizations to provide AI-powered Q&A based on their own knowledge bases. Users interact through a clean chat interface while administrators manage knowledge bases, AI providers, and user access through a terminal-style dashboard.
 
-**Current Status:** MVP with AI integration complete. Backend FastAPI server with Claude and OpenAI support. Frontend streams responses in real-time.
+**Current Status:** MVP with AI integration and Microsoft Entra ID authentication. Backend FastAPI server with Claude and OpenAI support. Frontend streams responses in real-time.
 
 ## Architecture
 
@@ -26,14 +26,16 @@ DevDen is a self-hosted AI chat platform that enables organizations to provide A
 ## Current Files
 
 **Frontend:**
-- `index.html` - Main chat interface structure with welcome screen
-- `script.js` - Chat interaction logic with SSE streaming
+- `index.html` - Main chat interface with login, welcome, and chat screens
+- `script.js` - Chat interaction logic with SSE streaming and auth handling
 - `style.css` - Catppuccin Mocha theme with pixel aesthetic
 
 **Backend:**
 - `backend/app/main.py` - FastAPI application entry point
-- `backend/app/config.py` - Environment configuration
-- `backend/app/api/chat.py` - Chat endpoints (POST /api/chat, POST /api/chat/stream)
+- `backend/app/config.py` - Environment configuration (AI providers, Entra ID, JWT)
+- `backend/app/api/chat.py` - Chat endpoints (POST /api/chat, POST /api/chat/stream) - protected
+- `backend/app/api/auth.py` - Auth endpoints (login, callback, me, logout, status)
+- `backend/app/middleware/auth.py` - JWT validation middleware
 - `backend/app/services/provider_manager.py` - Provider abstraction and fallback
 - `backend/app/services/provider_claude.py` - Claude implementation
 - `backend/app/services/provider_openai.py` - OpenAI implementation
@@ -77,12 +79,16 @@ docker compose down
 # Health check
 curl http://localhost:8000/health
 
+# Check auth status
+curl http://localhost:8000/api/auth/status
+
 # List available providers
 curl http://localhost:8000/api/chat/providers
 
-# Test chat (non-streaming)
+# Test chat (requires JWT token from auth flow)
 curl -X POST http://localhost:8000/api/chat \
   -H "Content-Type: application/json" \
+  -H "Authorization: Bearer YOUR_JWT_TOKEN" \
   -d '{"message": "Hello!"}'
 ```