This API provides secure endpoints that are verified against Entra ID in Azure. The endpoints are protected or require a specific client scope. This code works perfectly with the free tier of Entra ID ...

When authentication fails, things can go very, very wrong. I think this disclosure is mostly fine but I do feel that it didn't give quite enough air space to the things that reference it. Entity ...