Jamie D

The DefaultBotHandler has no authorisation built in, you would have to add your own based on what security rules you needed. eg. Adding in AAD auth using https://github.com/MicrosoftDX/AuthBot and then...

@garypretty that'll help for simple understanding of how it can be locked down. Would be worth adding in userid's for the given channel as well as all users & agents...

I think we need to at least include a basic security option, as it is an obvious question to raise. Which is what @garypretty has worked on. But I'd like...

^ really need some unit tests for this :)

Some testing resources here: https://blogs.msdn.microsoft.com/jamiedalton/2017/08/07/devops-for-bots-sprinkling-some-devops-on-your-bot/

Check out this solution: https://github.com/mortenn/BrowserPicker by Morten Nilsen Would make a great additional to PowerToys 😀

The typed model idea sounds good, as long as there is an example of how to implement it. The old MVC sample app really helped understanding.