Implementing Authentication with the MSAL
The MSAL allows you to get tokens from the Microsoft identity platform for authentication and accessing secure web APIs. For example, the MSAL can be used for getting secure access to Microsoft Graph and other Microsoft APIs, as well as any other web APIs, including your own.
There are MSAL libraries available to support several languages and frameworks using a consistent API, including Android, Angluar.js, iOS, macOS, Go, Java, JavaScript and TypeScript frameworks, Node.js, Python, React, and – as you might expect – the .NET ecosystem. The MSAL can be used to acquire tokens for web apps, web APIs, single-page apps, mobile and native applications, daemons, and server-side apps.
As mentioned earlier in this chapter, modern authentication can be extremely complex to implement yourself. MSAL handles a lot of the heavy lifting for you. For example, here are some of the things MSAL does for you:
- Uses OAuth and OIDC libraries...