azure-active-directory | Azure Active Directory OAuth 2.0 flow | Azure library

I receive the following error:

I've used following link https://docs.microsoft.com/en-us/azure/developer/java/spring-framework/configure-spring-boot-starter-java-app-with-azure-active-directory

In this I was able to authorize, but when the page opens, instead of the HTML page I want to show, I see this:

But in controller I'm calling newhome.html:

Controller code:

So I got a connection working using tedious but the options available in node-mssql for handling JSON are something really useful that I would like to have access to.

The documentation for node-mssql says you can pass an object with authentication settings that tedious would use and it will override the user/password properties but it's definitely not doing that. I can confirm because the error message comes back with the value for the user property.

Is there something wrong with the config object?

I already read and tried this, this, and many other resources, without success.

I have a UWP app that calls an AAD-protected HTTP-triggered Azure Function. I created the two app registrations on the AAD section of the Azure portal. The API app registration specifies a scope and has an application ID URI of api://5e6b2b53-.... On the “Authentication” blade, I set https://login.microsoftonline.com/common/oauth2/nativeclient as redirect URI. I already set the same value as the redirect URI of the UWP app registration (I don’t know if it’s correct). I also set:

On the Function app registration. I also set the following redirect URI for the Function app registration, but I don’t understand if it’s required:

The UWP app registration uses the right scope I defined on the Function app registration. Both the app registrations are multi-tenant. The code I use on the UWP app to call the protected Azure Function is:

I have an application that needs to connect to Azure SQL Server and is using Sequelize as the ORM. I am trying to make the solution more secure by authenticating using a service principal. I am using the module @azure/ms-rest-nodeauth to obtain an access token and passing that to Sequelize in my DB initializer. The function 'loginWithServicePrincipalSecret' gets me the access token by passing the SPN credentials.

Connection works fine following this tutorial when using:

I am trying to connect to my Azure SQL instance using an Access Token from Azure AD. I was following this tutorial over here: https://medium.com/microsoftazure/deploying-a-dacpac-to-azure-with-azure-pipelines-and-managed-identity-89703d405e00

But something is not working right in the approach.

The first thing was to make sure my user was setup in the database via:

I am trying to create azure ad groups, create a devops project and grant the azure ad groups permissions. Though I have found that the azure ad groups does not sync instantly (see https://developercommunity.visualstudio.com/idea/712605/allow-manual-force-sync-azure-active-directory-to.html)

I have only recently been tasked with writing some Business-type web applications, in the past many years I had mostly been working on SQL, services, and other non-client project -- so much of this is all new to me. I have had good success picking up and being productive with hosted Blazor WebAssembly. I need work through how to secure a Webassembly, so google lead me to:

https://docs.microsoft.com/en-us/aspnet/core/blazor/security/webassembly/hosted-with-azure-active-directory?view=aspnetcore-5.0

While I was not very familiar with the Azure portal, the reference seemed quite detailed and I thought this would be straightforward. I tried walking through the steps to Register a server API app in an existing tenant:

1. Azure Active Directory > App Registrations, New Registrations -- check
2. Provide Name for the App -- check
3. Choose supported account types (accounts in this organizational directory) -- check
4. Leave Redirect URI options to web and don't specify a redirect URI -- check
5. Clear Permissions > Grant admin consent to openid and offline_access - NOPE, no option on this screen for this, I wonder if that setting has moved or if somehow I don't the permissions to see it.
6. Having no other choice to proceed, I select Register.

During a quick look, I could not find anything about openid and offline_access. Is it right under my nose, or no longer needed, is the documentation out of date, or is there an easier approach? I didn't proceed further, other than to tinker, to the client app registration as I felt the server registration was not valid. Are there any other bumps in the road on the client application registration as well?

Just for perspective, right now, I am content to just force a login verified against AAD.

Thanks for any help!