Authorization Code Flow with PKCE in Azure AD This authorization code flow was recently enabled in Microsoft Azure AD. Microsoft also released an update of the Microsoft Authentication Library (MSAL) for javascript to support this flow, which is now called msal-browser. As this library is still in beta, documentation and samples are hard to find. ...

The OAuth 2.0 authorization code flow is described in section 4.1 of the OAuth 2.0 specification. With OIDC, it's used to perform authentication and authorization in the majority of app types, including single page apps, web apps, and natively installed apps. ...

Azure AD B2C extends the standard OAuth 2.0 flows to do more than simple authentication and authorization. It introduces the user flow. With user flows, you can use OAuth 2.0 to add user experiences to your application, such as sign-up, sign-in, and profile management. ...

To add identity management to a web app by using Azure AD B2C, use OpenID Connect instead of OAuth 2.0. Azure AD B2C extends the standard OAuth 2.0 flows to do more than simple authentication and authorization. It introduces the user flow. ...