I've successfully created a Sharepoint Webpart with a straightforward goal: authenticate users on an external website embedded within Sharepoint. This external site utilizes Azure AD for user logins.
However, my current implementation has a significant security flaw. While I can easily obtain an access token and the component functions as expected, there is a vulnerability in the code:
public render(): void {
token="XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX";
<iframe img src="https://www.example.org/oauthCallback.html?token="+token/>
}
Therefore, I am exploring the option to change it to something like this:
public render(): void {
<iframe img src="Azure redirection"/>
}
With "Azure redirection" handling user context verification with Azure AD and redirecting callbacks to , I aim to secure the process. However, I am unsure about how to proceed.
Any suggestions or insights would be greatly appreciated.
Best regards