page_type: sample languages:

• javascript
• html products:
• ms-graph
• azure-active-directory
• microsoft-identity-platform description: "A simple JavaScript Single-Page Application using the Auth Code flow w/ PKCE" urlFragment: "ms-identity-javascript-v2"

Vanilla JavaScript Single-page Application secured with MSAL.js

A simple vanilla JavaScript single-page application which demonstrates how to configure MSAL.JS 2.x to login, logout, and acquire an access token for a protected resource such as the Microsoft Graph API. This version of the MSAL.js library uses the authorization code flow with PKCE.

Note: A quickstart guide covering this sample can be found here.

Note: A more detailed tutorial covering this sample can be found here.

Contents

Prerequisites

Node must be installed to run this sample.

Setup

1. Register a new application in the Azure Portal. Ensure that the application is enabled for the authorization code flow with PKCE. This will require that you redirect URI configured in the portal is of type SPA.
2. Open the /app/authConfig.js file and provide the required configuration values.
3. On the command line, navigate to the root of the repository, and run npm install to install the project dependencies via npm.

Running the sample

1. Configure authentication and authorization parameters:
   1. Open authConfig.js
   2. Replace the string "Enter_the_Application_Id_Here" with your app/client ID on AAD Portal.
   3. Replace the string "Enter_the_Cloud_Instance_Id_HereEnter_the_Tenant_Info_Here" with "https://login.microsoftonline.com/common/" (note: This is for multi-tenant applications located on the global Azure cloud. For more information, see the documentation).
   4. Replace the string "Enter_the_Redirect_Uri_Here" with the redirect uri you setup on AAD Portal.
2. Configure the parameters for calling MS Graph API:
   1. Open graphConfig.js.
   2. Replace the string "Enter_the_Graph_Endpoint_Herev1.0/me" with "https://graph.microsoft.com/v1.0/me".
   3. Replace the string "Enter_the_Graph_Endpoint_Herev1.0/me/messages" with "https://graph.microsoft.com/v1.0/me/messages".
3. To start the sample application, run npm start.
4. Finally, open a browser and navigate to http://localhost:3000.

How did we do? Consider sharing your experience with us.

Key concepts

This sample demonstrates the following MSAL workflows:

• How to configure application parameters.
• How to sign-in with popup and redirect methods.
• How to sign-out.
• How to get user consent incrementally.
• How to acquire an access token.
• How to make an API call with the access token.

Contributing

This project welcomes contributions and suggestions. Most contributions require you to agree to a Contributor License Agreement (CLA) declaring that you have the right to, and actually do, grant us the rights to use your contribution. For details, visit https://cla.opensource.microsoft.com.

When you submit a pull request, a CLA bot will automatically determine whether you need to provide a CLA and decorate the PR appropriately (e.g., status check, comment). Simply follow the instructions provided by the bot. You will only need to do this once across all repos using our CLA.

This project has adopted the Microsoft Open Source Code of Conduct. For more information see the Code of Conduct FAQ or contact [email protected] with any additional questions or comments.