Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
@microsoft/mgt
Advanced tools
The Microsoft Graph Toolkit is a collection of web components powered by the Microsoft Graph.
Components are functional and work automatically with the Microsoft Graph
Components work with any web framework and on all all modern browsers. IE 11 is also supported
This library is in preview and is in early development. Based on feedback from the community, all components and APIs are expected to change and improve.
You can use the components by referencing the loader directly (via unpkg), or installing the npm package
<script src="https://unpkg.com/@microsoft/mgt/dist/bundle/mgt-loader.js"></script>
You can then start using the components in your html page. Here is a full working example with the Msal provider:
<script src="https://unpkg.com/@microsoft/mgt/dist/bundle/mgt-loader.js"></script>
<mgt-msal-provider client-id="[CLIENT-ID]"></mgt-msal-provider>
<mgt-login></mgt-login>
<!-- <script>
// alternatively, you can set the provider in code and provide more options
mgt.Providers.globalProvider = new mgt.MsalProvider({clientId: '[CLIENT-ID]'});
</script> -->
NOTE: MSAL requires the page to be hosted in a web server for the authentication redirects. If you are just getting started and want to play around, the quickest way is to use something like live server in vscode.
The benefits of using MGT through NPM is that you have full control of the bundling process and you can bundle only the code you need for your site. First, add the npm package:
npm install @microsoft/mgt
Now you can reference all components at the page you are using:
<script src="node_modules/@microsoft/mgt/dist/es6/components.js"></script>
Or, just reference the component you need and avoid loading everything else:
<script src="node_modules/@microsoft/mgt/dist/es6/components/mgt-login/mgt-login.js"></script>
Similarly, to add a provider, you can add it as a component:
<script src="node_modules/@microsoft/mgt/dist/es6/components/providers/mgt-msal-provider.js"></script>
<mgt-msal-provider client-id="[CLIENT-ID]"></mgt-msal-provider>
or, add it in your code:
<script type="module">
import { Providers, MsalProvider } from '@microsoft/mgt';
Providers.globalProvider = new MsalProvider({ clientId: '[CLIENT-ID]' });
</script>
The components work best when used with a provider. The provider exposes authentication and Microsoft Graph apis used by the components to call into the Microsoft Graph.
The toolkit contains providers for MSAL, SharePoint, Teams, and Office Add-ins (coming soon). You can also create your own providers by extending the [IProvider] abstract class.
We enthusiastically welcome contributions and feedback. Please read the contributing guide before you begin.
For general questions and support, please use Stack Overflow where questions should be tagged with microsoft-graph-toolkit
Please use GitHub Issues for bug reports and feature requests. We highly recommend you browse existing issues before opening new issues.
Copyright (c) Microsoft and Contributors. All right reserved. Licensed under the MIT License
This project has adopted the Microsoft Open Source Code of Conduct. For more information see the Code of Conduct FAQ or contact opencode@microsoft.com with any additional questions or comments.
FAQs
The Microsoft Graph Toolkit
The npm package @microsoft/mgt receives a total of 0 weekly downloads. As such, @microsoft/mgt popularity was classified as not popular.
We found that @microsoft/mgt demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.