I have an outlook addin that runs on REST-APIs. I want to migrate it to GRAPH and I am currently exploring the possibility of using the MSAL-browser library to get the GRAPH access tokens. I am currently using this as reference. This was mentioned in this stack-overflow item
I find the 'Single Page Application' solution straight forward, not requiring much interaction with the addin host server. I intend to use its authRedirect flow.
Although I have my own opinions/conclusions, I would like to ask some expert thoughts on the following :
- Does MSAL-browser library work for all platforms now? (i.e. Windows Outlook client, IPhone/Android Outlook client, MAC-Outlook client and browser-OWA outlook)
- Is it safe to use MSAL-browser for an outlook addin?
- If it is not safe, what other alternative is there that does not require much interaction with the addin server?
Thank you very much for all your answers.