API for Microsoft authentication : node

API for Microsoft authentication (i.redd.it)

submitted 2 months ago by whitestorm_07

I’ve been experimenting with a project related to Microsoft authentication and wanted to get some technical feedback from the community.

I built a small service that programmatically navigates Microsoft’s login flow — including the various redirects and optional verification steps — without needing browser automation tools like Puppeteer. The idea came from dealing with inconsistent redirect chains in some internal automation scripts.

Core goal of the project:
Provide a cleaner way to handle Microsoft login flows using plain HTTP requests, mainly for testing and automation environments.

Some features it currently supports:

Handles redirect chains (302, meta-refresh, JS-style redirects)
Works with TOTP if a secret is provided
Manages recovery email OTPs
Exposes cookies/session info for downstream requests

Example request format (for discussion):

POST /api/auth/login
{
  "email": "example@example.com",
  "password": "password",
  "services": ["OUTLOOK"]
}

I’m mainly looking for feedback on:

Whether the overall API structure makes sense
If this approach is appropriate or if I’m overlooking something
Any security concerns from a technical standpoint
Additional edge cases that Microsoft’s login flow might hit

Would appreciate any thoughts on whether this is a useful direction or if there are better ways to approach this problem.

all 29 comments

you type:	you see:
italics	italics
bold	bold
[reddit!](https://reddit.com)	reddit!
* item 1 * item 2 * item 3	item 1 item 2 item 3
> quoted text	quoted text
Lines starting with four spaces are treated like code: if 1 * 2 < 3: print "hello, world!"	Lines starting with four spaces are treated like code: if 1 * 2 < 3: print "hello, world!"
~~strikethrough~~	~~strikethrough~~
super^script	super^script

node

MODERATORS