fix(auth): resolve JWT InvalidSignatureError and improve frontend UX

- Fix auth by using idToken fallback when accessToken audience mismatches
- Add PyJWT verification with audience-aware token selection in frontend
- Source health: track last_attempt_time and error status per source
- Frontend: fix modal outside x-data scope, add circular-safe JSON stringify
- Frontend: support multi-select service filter with All/None toggles
- Frontend: improve filter layout into organized rows
- Frontend: fix text overflow and result pill colors (success/succeeded)
- Intune: normalize application actors (auditActorType=Application)
- Add cache-control middleware for HTML/API responses
- Update tests for multi-service filtering and source health

backend/frontend/style.css

@@ -91,12 +91,51 @@ button.ghost {
 }
 
 .filters {
-  display: grid;
-  grid-template-columns: repeat(auto-fit, minmax(220px, 1fr));
+  display: flex;
+  flex-direction: column;
   gap: 14px;
 }
 
-.filters label {
+.filter-row {
+  display: grid;
+  grid-template-columns: repeat(4, 1fr);
+  gap: 14px;
+  align-items: start;
+}
+
+.filter-row .span-2 {
+  grid-column: span 2;
+}
+
+.filter-row--tall {
+  align-items: stretch;
+}
+
+.actions-row {
+  display: flex;
+  justify-content: flex-start;
+}
+
+@media (max-width: 900px) {
+  .filter-row {
+    grid-template-columns: repeat(2, 1fr);
+  }
+  .filter-row .span-2 {
+    grid-column: span 2;
+  }
+}
+
+@media (max-width: 480px) {
+  .filter-row {
+    grid-template-columns: 1fr;
+  }
+  .filter-row .span-2 {
+    grid-column: span 1;
+  }
+}
+
+.filters label,
+.filter-group {
   display: flex;
   flex-direction: column;
   gap: 6px;
@@ -159,7 +198,7 @@ input {
 
 .events {
   display: grid;
-  grid-template-columns: repeat(auto-fit, minmax(260px, 1fr));
+  grid-template-columns: repeat(auto-fit, minmax(min(260px, 100%), 1fr));
   gap: 12px;
 }
 
@@ -168,6 +207,8 @@ input {
   border-radius: 14px;
   padding: 14px;
   background: rgba(255, 255, 255, 0.02);
+  min-width: 0;
+  overflow-wrap: break-word;
 }
 
 .event__meta {
@@ -175,16 +216,19 @@ input {
   gap: 8px;
   align-items: center;
   margin-bottom: 8px;
+  flex-wrap: wrap;
 }
 
 .pill {
   display: inline-block;
-  padding: 6px 10px;
+  padding: 5px 10px;
   border-radius: 999px;
   background: rgba(125, 211, 252, 0.12);
   border: 1px solid rgba(125, 211, 252, 0.4);
   color: var(--text);
   font-size: 12px;
+  max-width: 100%;
+  overflow-wrap: break-word;
 }
 
 .pill--ok {
@@ -197,8 +241,17 @@ input {
   border-color: rgba(249, 115, 22, 0.5);
 }
 
+.pill--err {
+  background: rgba(239, 68, 68, 0.15);
+  border-color: rgba(239, 68, 68, 0.5);
+}
+
 .event h3 {
   margin: 0 0 6px;
+  font-size: 17px;
+  line-height: 1.25;
+  overflow-wrap: break-word;
+  word-break: break-word;
 }
 
 .event__detail {
@@ -211,6 +264,71 @@ input {
   margin-top: 10px;
 }
 
+.multi-select {
+  border: 1px solid var(--border);
+  border-radius: 10px;
+  background: rgba(255, 255, 255, 0.02);
+  overflow: hidden;
+}
+
+.multi-select__actions {
+  display: flex;
+  gap: 12px;
+  padding: 6px 10px;
+  border-bottom: 1px solid var(--border);
+  background: rgba(255, 255, 255, 0.03);
+}
+
+.multi-select__actions .link {
+  background: none;
+  border: none;
+  color: var(--accent-strong);
+  font-size: 12px;
+  padding: 0;
+  cursor: pointer;
+  font-weight: 500;
+  box-shadow: none;
+}
+
+.multi-select__actions .link:hover {
+  text-decoration: underline;
+}
+
+.multi-select__options {
+  max-height: 140px;
+  overflow-y: auto;
+  display: flex;
+  flex-direction: column;
+}
+
+.checkbox-label {
+  display: flex !important;
+  flex-direction: row !important;
+  align-items: center !important;
+  gap: 8px;
+  padding: 6px 10px;
+  font-size: 13px;
+  color: var(--text);
+  cursor: pointer;
+  border-bottom: 1px solid rgba(255, 255, 255, 0.04);
+}
+
+.checkbox-label:last-child {
+  border-bottom: none;
+}
+
+.checkbox-label:hover {
+  background: rgba(255, 255, 255, 0.04);
+}
+
+.checkbox-label input[type="checkbox"] {
+  accent-color: var(--accent-strong);
+  width: 14px;
+  height: 14px;
+  flex-shrink: 0;
+  margin: 0;
+}
+
 .modal {
   position: fixed;
   inset: 0;