How do I verify the token I receive from logging into my Angular App (Azure AD / MSAL) when making an API HTTP request to NodeJS?

Question

Currently where I am is this. I followed the Microsoft documentation to where a user can login to Angular front end via Azure Active Directory.

I followed this tutorial: https://learn.microsoft.com/en-us/azure/active-directory/develop/tutorial-v2-angular-auth-code

This then populate my local storage with various details including an idtoken and accesstoken.

My hope is to then send a token to my backend (NodeJS), and have it validate the token before executing the API and then sending back the result.

Previously I was able to do this with middleware and leveraging Cognito but I am being forced to switch to Azure AD for Auth.

Any help would be greatly appreciated as I am currently at a loss. Thank you.

Answer 1

Check this: https://www.npmjs.com/package/validate-azure-ad-token

I think this library made just for you

If you are using a @azure/msal-react or @azure/msal-browser on the frontend site and you just want to verify your Microsoft access token on your node server.