passport-azure-ad vs msal-node

[darena-patrick]

Greetings - I noted that this document recommends both passport-azure-ad and msal-node for Node.js Web development.

Is there a recommendation on which one should be used when? Or should we start using msal-node moving forward?

[sameerag]

@yubischiess We currently recommend msal-node for all desktop/web app scenarios detailed in the node docs. passport-azure-ad is recommended as a middleware library, used for validating tokens supporting passport-js strategies OpenID and Bearer.

However we are currently working on a design for a new version of this library, which will be based on msal-node and providing the users an option to either opt-in to passport-js strategies or use msal-node itself for validating the tokens. Another point to note is that passport-azure-ad is currently in maintenance and only taking security fixes. No new development is expected.

Hope this clarifies.