articleschannelstagsspacestoolkit
Microsoft Dev Blogs

Microsoft 365 Developer Proxy v0.9 with over-consenting guidance

View Original
thumbnail

  • Microsoft 365 Developer Proxy v0.9 introduces the ability to detect over-consented apps that use Microsoft Graph. This feature compares the scopes/roles on the access token with the minimal permissions needed to call the captured APIs and warns if the token uses more/broader permissions.

  • This version is released under the new name Microsoft 365 Developer Proxy, indicating its compatibility with Microsoft Graph and other APIs on Microsoft 365 and beyond. The executable is now called "m365proxy".

  • Users can download Microsoft 365 Developer Proxy v0.9 to test their apps' handling of API errors and provide feedback to improve the tool.

  • You can follow @Microsoft365Dev on Twitter for the latest developer news and updates.

  • Waldek Mastykarz is the Senior Developer Advocate for Microsoft 365, and Garry Trinder is the Senior Cloud Advocate for Microsoft 365.