Power Platform Community Forum Thread Details

I am working on a case where a user triggers a plugin to check documents in SharePoint. The plugin is supposed to return the number of documents created. For authentication, I want to avoid generating a token within the plugin using a client secret or other similar methods. Instead, I would like to leverage the authentication context of the user who triggered the plugin to make the SharePoint API call.

Is there a way to authenticate to SharePoint using the calling user's credentials? Or is this approach not feasible to implement? Any insights or alternative solutions would be appreciated.

Categories:

Power Apps Pro Dev & ISV

Use OAuth 2.0 implicit grant flow in your Power Pages site | Microsoft Learn

"This feature allows a customer to make client-side calls to external APIs and secure them using OAuth implicit grant flow. It provides an endpoint to obtain secure id tokens. These tokens will contain user identity information to be used by external APIs for authorization following OAuth 2.0 implicit grant flow. The identity information of a signed-in user is passed in a secured manner to the external AJAX calls, which helps developers to pass authentication context and will also help users secure their APIs."

I hope that can help you, also if it is only the id tokens and not the full access token as usual in the client-side application.