Change the method of obtaining tokens from implicit flow to pkce (#17530

) * Upgrade msal.js to a higher version to use PKCE.
Azure · Nov 13, 2020 · 65b9871 · 65b9871
1 parent 829ca05
commit 65b9871
Show file tree

Hide file tree

Showing 6 changed files with 9,079 additions and 8,357 deletions.
diff --git a/...es/azure-spring-boot-sample-active-directory/src/main/resources/static/App/Scripts/app.js b/...es/azure-spring-boot-sample-active-directory/src/main/resources/static/App/Scripts/app.js
@@ -20,15 +20,40 @@ angular.module('todoApp', ['ngRoute', 'MsalAngular'])
 
         msalProvider.init(
             {
-                authority: 'https://login.microsoftonline.com/xxxorg.onmicrosoft.com',
-                clientID: applicationConfig.clientID,
-                cacheLocation: 'localStorage',
-                postLogoutRedirectUri: 'http://localhost:8080/logout',
-
-                tokenReceivedCallback: function (errorDesc, token, error, tokenType) {
+                auth: {
+                    clientId: "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
+                    authority: "https://login.microsoftonline.com/xxxorg.onmicrosoft.com",
+                    redirectUri: "http://localhost:8080/",
+                },
+                cache: {
+                    cacheLocation: "sessionStorage", // This configures where your cache will be stored
+                    storeAuthStateInCookie: false, // Set this to "true" if you are having issues on IE11 or Edge
                 },
-            },
+                system: {
+                    loggerOptions: {
+                        loggerCallback: (level, message, containsPii) => {
+                            if (containsPii) {
+                                return;
+                            }
+                            switch (level) {
+                                case msal.LogLevel.Error:
+                                    console.error(message);
+                                    return;
+                                case msal.LogLevel.Info:
+                                    console.info(message);
+                                    return;
+                                case msal.LogLevel.Verbose:
+                                    console.debug(message);
+                                    return;
+                                case msal.LogLevel.Warning:
+                                    console.warn(message);
+                                    return;
+                            }
+                        }
+                    }
+                }
+            }
+            ,
             $httpProvider
         );
-
     }]);
diff --git a/...ure-spring-boot-sample-active-directory/src/main/resources/static/App/Scripts/homeCtrl.js b/...ure-spring-boot-sample-active-directory/src/main/resources/static/App/Scripts/homeCtrl.js
@@ -2,12 +2,14 @@
 angular.module('todoApp')
     .controller('homeCtrl', ['$scope', 'msalAuthenticationService', '$location', function ($scope, msalService, $location) {
         $scope.login = function () {
-            msalService.loginRedirect();
+            msalService.loginRedirect({
+                scopes: ["User.Read"]
+            });
         };
         $scope.logout = function () {
             msalService.logout();
         };
         $scope.isActive = function (viewLocation) {
             return viewLocation === $location.path();
         };
-    }]);
+    }]);