Authenticate users in JavaScript apps with MSAL.js

The Microsoft Authentication Library (MSAL) is the critical enabler for any developer who wants to connect to the Microsoft Identity Platform, acquire a token, and then use that token to access secure APIs.
• In this session, we will “start from scratch” by going over the basics of the Microsoft Identity Platform and how to get a token using HTTP requests and a browser manually.
• We will then show how the MSAL.js library makes it very easy to acquire and renew tokens for your apps.

[goelliego]

Really Liked the manual method to explain slowly for beginners. Best tutorial so far on the getting started with the topic.

[Terry-]

Lol - that "header" typo had me screaming at the screen "It's right there!"

[squid]

this is an excellent video! I have to implement authentication using azure for a work project without ever having done it before. thank you!

[KlrStng]

Thank you for this video, it is helpful. As of 1/26/21, the manual step to acquire a token (at ~28:00) now requires the client secret as well as the client id and the code.

[carloolleres]

Hi, I'm faced with an error of URL Malformed even after providing a Client Secret to the form data sent at the tutorial time 28:00, anybody experienced the same error?

[vishin]

Great video!! waiting for Authenticating to Azure with MSAL.js

[itsmeinspiron]

Thank you for this walk through, very easy to digest - great job Sidney!

[briancoder]

Excellent tutorial. MSAL is very useful. Thank you.

[tushaar]

Excellent tutorial, can you please show using pkce as well as it is going to be become standard pretty soon

[kanakarajunaiduthota]

can we create or update SharePoint list item using MSAL who have read-only access on the SharePoint?

[thingsiwishiknew]

Hi there love the video, quick question, how would this change if i wanted to use a certificate instead of a secret

[jlumley]

does this work if your app is in an iframe.

[agamesta]

thank you very much, it work with me after more time in search

[randompointlessness]

I ve been using adal.js but since we migrate to .net 5.0 it gives me errFailed while on microsoft authentication page redirection won't work so I assume I have to use MSAL.js

[cleanbowledyt]

great tutorial...thanks for this one....however is there any api that would help me to logout the signed in user
Please share the same if you happen to know about it

[aashayamballi]

Thanks for the great demo. I just had one question. If I have a single page app or a native app and a backend API (django rest) completely independen of each other. In my case if my single page app/native apl wants to access certain data from backend API. And inorder to access the API, user should be logged in the backend API.

So what my approch is to make use of MSAL library to get the access token from the SPA/native app and then once token is acquired, pass that token to backend API, validate it, get the user info from graph api, if user is exists in the DB login the user and pass the required info. If user info doesn't exist then create the user, login and pass the info from API.

So my question is when I pass the access token to backend api. How can we validate that the token which we passed to backend API is valid token or not?

Is it just we need to make an API call to graph API? if it is able to get the user data then token is valid or if it fails then the token is invalid.

Is it the general way to validate the token or some better approach is there? Please help

[jasonthorpe]

Great Stuff! I have a request though, Can you post links to the other videos in this series in the description?

[nagacse]

Msal refreshtoken method not working consistent

[gmil]

contrary to what this video says there doesn't appear to be anyone answering emails to the address advised... which is a real shame as as soon as you try to do anything not out-the-box with B2C it's like walking in treacle

[dvijhay]

How do you get data from Sharepoint lists using msal.js, do you have any tutorials.