AB#38716 MSAL integration with DevXApi application/RSC endpoint

[gracet9182]

Overview

• The purpose is to set up an endpoint that allows developers to retrieve the application token
• For a more detailed explanation of the workflow and code, visit the configuration documentation.
• Furthermore, there are methods attached for token retrieval. @omersayshi found this one
• Branched off of AB#38714 Set up end point for graph explorer application mode proxy #10 , hence the base is pointed at that. It will be changed to interns/dev once the endpoint trigger is merged

Notes

Depending on your configuration, you may need to set up an Azure blob. I've recorded a video how to set it up for devxapi. This is done via Azure Portal. Sign in into your microsoft.com email to get access to the Garage azure. You will need to use the connection string from the azure storage and put it in appsettings.json

Azure.Blob.mp4

Demo

• I ran this locally and then hit the endpoint at /graphproxy/token/{tenantId} (note it was /graphproxy/token but is now /graphproxy/token/{tenantId}
• Then, I tested that the token was able to use the RSC permission by deleting a channel
• Prerequisite: Have the app installed in the teams that you are about to delete

Testing.token.mp4

Testing Instructions

• Pull this branch
• Fill in the TenantId, ClientId, ClientSecret and AzureConnectionString (refer to Notes in this PR) inside appsettings.json
• Open in Visual Studio
• Run in IIS Express
• GET https://localhost:44399/graphproxy/token/{tenantId} in postman

[omersayshi]

Check my comments out below

[omersayshi]

Looks good! Great work!

[jerryxihe]

Tested this with the Teams app (as well as Postman) and everything seemed good once CORS was disabled. Great work!