We need to be able to specify scope

[AskYous]

We need to be able to request a specific scope. For example, if I want access to the users emails, calendar events, and profile, I have no way to specify it. If there was also some documentation on what information the token gives us access to, that would be much more helpful. Auth2 on passport.js' site has documentation on this (click here and scroll down to 'Scope').

An example of requesting a specific scope is like this:

passport.use(new OAuth2Strategy({
  "authorizationURL": "https://login.microsoftonline.com/common/oauth2/authorize",
   ...
  "resource": "https://login.microsoftonline.com/common",
  "scope": ["email", "offline_access", "profile"] // the scope
});

[igorya76]

I ran into this same issue, referencing microsofts docs you need to require scope. This does allow for scope to be assigned, but through resources.

From the microsoft Application portal, open the "Edit Application Manifest" and look for

"requiredResourceAccess": [ { "resourceAppId": "00000003-0000-0000-c000-000000000000", "resourceAccess": [ { "id": "e1fe6dd8-ba31-4d61-89e7-88639da4683d", "type": "Scope" } ] } ]

This should be placed in:

passport.use(new AzureAdOAuth2Strategy({
  clientID: process.env.EMAIL_ID,
  clientSecret: process.env.EMAIL_PASSWORD,
  callbackURL: process.env.REDIRECT_URI,
  scope: process.env.EMAIL_SCOPE,
  resource: '00000003-0000-0000-c000-000000000000'

},

[tommoor]

^ This comment was very helpful, why is Microsoft's implementation soooo bad 😢