microsoft login

User/Routes/passport.unprotected.routes.js

@@ -12,6 +12,14 @@ if (process.env.GOOGLE_ID && process.env.GOOGLE_SECRET) {
   });
 }
 
+if (process.env.MICROSOFT_ID && process.env.MICROSOFT_SECRET) {
+  Router.get('/microsoft', passport.authenticate('microsoft'));
+  Router.get('/microsoft/callback', passport.authenticate('microsoft', { failureRedirect: '/auth/microsoft', session: false }), (req, res) => {
+    const { accessToken, refreshToken } = req.user;
+    return res.redirect(`${process.env.WEBSITE_HOME}/login?accessToken=${accessToken}&refreshToken=${refreshToken}`);
+  });
+}
+
 if (process.env.GITHUB_ID && process.env.GITHUB_SECRET) {
   Router.get('/github', passport.authenticate('github'));
   Router.get('/github/callback', passport.authenticate('github', { failureRedirect: '/auth/github', session: false }), (req, res) => {

User/Service/passport.js

@@ -1,6 +1,7 @@
 import passport from 'passport';
 import { Strategy as GitHubStrategy } from 'passport-github2';
-import { OAuth2Strategy as GoogleStrategy } from 'passport-google-oauth';
+import { Strategy as GoogleStrategy } from 'passport-google-oauth20';
+import { Strategy as MicrosoftStrategy } from 'passport-microsoft';
 import { BasicStrategy } from 'passport-http';
 import { Strategy as LinkedInStrategy } from 'passport-linkedin-oauth2';
 
@@ -34,7 +35,7 @@ if (process.env.GOOGLE_ID && process.env.GOOGLE_SECRET) {
       clientSecret: process.env.GOOGLE_SECRET,
       passReqToCallback: true
     },
-    async (req, _accessToken, _refreshToken, _params, profile, done) => {
+    async (req, _accessToken, _refreshToken, profile, done) => {
       try {
         const email = profile.emails[0]?.value;
         // eslint-disable-next-line sonarjs/no-duplicate-string
@@ -48,6 +49,32 @@ if (process.env.GOOGLE_ID && process.env.GOOGLE_SECRET) {
   passport.use('google', googleStrategyConfig);
 }
 
+/**
+ * Sign in with Microsoft.
+ */
+if (process.env.MICROSOFT_ID && process.env.MICROSOFT_SECRET) {
+  const microsoftStrategyConfig = new MicrosoftStrategy(
+    {
+      callbackURL: '/auth/microsoft/callback',
+      clientID: process.env.MICROSOFT_ID,
+      clientSecret: process.env.MICROSOFT_SECRET,
+      passReqToCallback: true,
+      scope: ['user.read'],
+    },
+    async (req, _accessToken, _refreshToken, profile, done) => {
+      try {
+        const email = profile.emails[0]?.value;
+        // eslint-disable-next-line sonarjs/no-duplicate-string
+        const loggedInUser = await loginWithCredentals({ email, isPassRequired: false, rememberMe: true, tenant: req.headers['x-tenant-id'] });
+        return done(null, loggedInUser);
+      } catch (err) {
+        return done(err);
+      }
+    }
+  );
+  passport.use('microsoft', microsoftStrategyConfig);
+}
+
 /**
  * Sign in with GitHub.
  */

package.json

@@ -40,9 +40,10 @@
         "nodemailer": "^6.7.7",
         "passport": "^0.7.0",
         "passport-github2": "^0.1.12",
-        "passport-google-oauth": "^2.0.0",
+        "passport-google-oauth20": "^2.0.0",
         "passport-http": "^0.3.0",
         "passport-linkedin-oauth2": "^2.0.0",
+        "passport-microsoft": "^2.1.0",
         "sequelize": "^6.32.1",
         "swagger-autogen": "^2.23.7",
         "swagger-ui-express": "^5.0.1",