Improve your app security when calling Microsoft Graph

This sample demonstrates how to use Dev Proxy to improve your app security when calling Microsoft Graph API. Using this sample you use Dev Proxy to check for minimal permissions, check if you are using excessive permissions, and prevent permission scope creep.

Garry Trinder, Waldek Mastykarz

Download ↓View on GitHub

References

Get started with the Dev Proxy↗

The tutorial will introduce you to the Dev Proxy and show you how to use its features.

Detect minimal Microsoft Graph API permissions↗

Instructions on how to detect the minimal Microsoft Graph API permissions that your app needs.

Check if you're using excessive Microsoft Graph API permissions↗

Instructions on how to check if your app is using more permissions than it needs.

Use Dev Proxy in CI/CD scenarios↗

Instructions on how to use Dev Proxy with GitHub Actions and Azure Pipelines.