node-sp-auth | Unattended SharePoint http authentication with nodejs | Authentication library

In my company I/T has just set up a new Sharepoint 2019 OnPromise, that is hybrid, using Azure AD for authentication.

I'm a site collection admin for my Sharepoint website. Let's say the URL to Sharepoint is https://aymeric.sp.my-company.com

When I access this URL I'm automatically redirected to https://login.microsoftonline.com/TENANT-ID/wsfed?wa=wsignin1.0&wtrealm=urn%3aSharepoint%3afederation&wctx=https%3a%2f%2faymeric.sp.my-company.com%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252F&wreply=https%3a%2f%2faymeric.sp.my-company.com%2f_trust%2fdefault.aspx&sso_nonce=AQABAAAAAABeAFzDwllzTYGDLh_qYbH87qVvvwM4pLiqYXloFo6Il7_-ry9WsQiAA&client-request-id=8dacdcfb-c68f-4ec2-a3e7-7760cecf3699&mscrid=8dacdcfb-c86f-4ec2-a3e7-7760cecf3699 – I'm automatically identified and redirected back to Sharepoint with the correct profile.

One of my I/T contact gave me the below information:

• we don't use ADFS
• the sign in URL is https://login.microsoftonline.com/TENANT-ID/saml2
• the Azure AD identifier is https://sts.windows.net/TENANT-ID/

Now I'm trying to access to Sharepoint Web Services (like https://aymeric.sp.my-company.com/_vti_bin/UserProfileService.asmx) using JavaScript and a Node app (node index.js). I'm using this technique with a Sharepoint 2013 OnProm and I have no issue: I just pass my credentials using https://github.com/s-KaiNet/node-sp-auth and it just works.

If I try to access the SP 2019 Web Services in the browser, it just works too.

But using a Node app with this Sharepoint Hybrid based on Azure AD I cannot find how to pass credentials… What to send? How to authenticate? Do I need to use an Azure AD App to connect to my Sharepoint OnProm? If yes, how to configure? Should I just send an "Authentication" header with a "Bearer" and an access token: if yes, how to get this access token?

Whatever I try (and I tried dozen and dozen of things) I always end with (in best cases) an error 403 "Access denied. You do not have permission to perform this action or access this resource.".

I tried different authentications, I also tried adal-node with an Azure AD App created from https://portal.azure.com/, but it's confusing. After two days of search and tries, I feel like I need help.

Thanks

is there any way authenticate by node js ? i want to use node web api using sharepoint 2013 auth by username and password.after user login i will reach sharepoint lists for crud operations. i used node-sp-auth but these codes doesnt work for me. still i am getting 401 error code.

I tried to access our internal sharepoint with the node-sp-auth library for Node.js but got stuck with a mysetrious error:

ReferenceError: Headers is not defined

I could trace it back to an internal function, that uses a constructor with that name. Seems for me like there might be some dependencies missing?

In the following my code:

I'm building a webapplication on NodeJS and ExpressJs where i am trying to upload documents to a Sharepoint Online library through the Sharepoint REST Api.

I'm able to authenticate and create and update list items. I'm using node-sp-auth to authenticate and express-request to make http requests.

In order to access the Sharepoint REST api i'm using the FormDigestValue in my header.

Header: