auth.js

// import { CommonClientCredentialRequest } from "@azure/msal-common";

const msalcommon = require('@azure/msal-common');
const msal = require('@azure/msal-node');


/**
 * Configuration object to be passed to MSAL instance on creation. 
 * For a full list of MSAL Node configuration parameters, visit:
 * https://github.com/AzureAD/microsoft-authentication-library-for-js/blob/dev/lib/msal-node/docs/configuration.md 
 */
// const msalConfig = {
// 	auth: {
// 		clientId: process.env.CLIENT_ID,
// 		authority: process.env.AAD_ENDPOINT + process.env.TENANT_ID,
// 		clientSecret: process.env.CLIENT_SECRET,
// 	}
// };

const msalConfig = {
	auth: {
		clientId: $client_id,
		authority: "https://login.microsoftonline.com/" + $tenant_id,
		clientSecret: $client_secret,
	}
};

/**
 * With client credentials flows permissions need to be granted in the portal by a tenant administrator.
 * The scope is always in the format '<resource>/.default'. For more, visit: 
 * https://docs.microsoft.com/azure/active-directory/develop/v2-oauth2-client-creds-grant-flow 
 */
const tokenRequest = {
	scopes: [$client_id + "/.default"],
	skipCache: true
};

const apiConfig = {
	uri: $client_id + "/v1.0/users",
};

/**
 * Initialize a confidential client application. For more info, visit:
 * https://github.com/AzureAD/microsoft-authentication-library-for-js/blob/dev/lib/msal-node/docs/initialize-confidential-client-application.md
 */
const cca = new msal.ConfidentialClientApplication(msalConfig);

/**
 * Acquires token with client credentials.
 * @param {object} tokenRequest 
 */
async function getToken(tokenRequest) {
	return await cca.acquireTokenByClientCredential(tokenRequest);
}

module.exports = {
	apiConfig: apiConfig,
	tokenRequest: tokenRequest,
	getToken: getToken
};