oauthSDK

README

oauthSDK

oauthSDK provides a simple interface for the various server side oauth flows

Available clients

Topic	Link
deviceCodeFlow	Use this in client-side code when authenticating interactively with the user, e.g. a CLI.
oauthMiddleware	Use this code to embed an authorisation handler in your HTTP server. The library provides a middleware http handler to validate bearer access tokens
clientCredentialsFlow	Use this client for trusted machine to machine communication, e.g. a server SDK calling an API. This type of grant is commonly used for server-to-server interactions that must run in the background, without immediate interaction with a user. These types of applications are often referred to as daemons or service accounts.
onBehalfOfFlow	This code is curently NOT TESTED. The OAuth 2.0 On-Behalf-Of flow (OBO) serves the use case where an application invokes a service/web API, which in turn needs to call another service/web API. The idea is to propagate the delegated user identity and permissions through the request chain. For the middle-tier service to make authenticated requests to the downstream service, it needs to secure an access token from the Microsoft identity platform, on behalf of the user.

See the individual README links for details