authConfig.json

{
    "credentials": {
        "tenantID": "Enter_the_Tenant_Info_Here",
        "clientID": "Enter_the_Application_Id_Here",
        "clientSecret": "Enter_the_Client_Secret_Here"
    },
    "metadata": {
        "authority": "login.microsoftonline.com",
        "discovery": ".well-known/openid-configuration",
        "version": "v2.0"
    },
    "settings": {
        "validateIssuer": true,
        "passReqToCallback": false,
        "loggingLevel": "info",
        "cacheTTL": 3600
    },
    "protectedResources": {
        "graphAPI": {
            "endpoint": "https://graph.microsoft.com/v1.0/me/checkMemberGroups",
            "scopes": [
                "User.Read",
                "GroupMember.Read.All"
            ]
        }
    },
    "protectedRoutes": {
        "todolist": {
            "endpoint": "/api",
            "scopes": [
                "access_via_group_assignments"
            ]
        }
    },
    "accessMatrix": {
        "todolist": {
            "path": "/todolist",
            "methods": [
                "GET",
                "POST",
                "PUT",
                "DELETE"
            ],
            "groups": [
                "Enter_the_Object_Id_of_GroupMember_Group_Here",
                "Enter_the_Object_Id_of_GroupAdmin_Group_Here"
            ]
        },
        "dashboard": {
            "path": "/dashboard",
            "methods": [
                "GET"
            ],
            "groups": [
                "Enter_the_Object_Id_of_GroupAdmin_Group_Here"
            ]
        }
    }
}