Merge branch 'add-microsoft-auth' into 'main'

Add Azure auth

See merge request digiresilience/link/link-stack!17

apps/link/app/(login)/login/_components/Login.tsx

@@ -12,6 +12,7 @@ import {
 import {
   Apple as AppleIcon,
   Google as GoogleIcon,
+  Microsoft as MicrosoftIcon,
   Key as KeyIcon,
 } from "@mui/icons-material";
 import { signIn, getProviders } from "next-auth/react";
@@ -182,6 +183,21 @@ export const Login: FC<LoginProps> = ({ session }) => {
                       </IconButton>
                     </Grid>
                   )}
+                  {provider === "azure-ad" && (
+                    <Grid item sx={{ width: "100%" }}>
+                      <IconButton
+                        sx={buttonStyles}
+                        onClick={() =>
+                          signIn("azure-ad", {
+                            callbackUrl: `${origin}`,
+                          })
+                        }
+                      >
+                        <MicrosoftIcon sx={{ mr: 1 }} />
+                        Sign in with Azure
+                      </IconButton>
+                    </Grid>
+                  )}
                   {provider === "credentials" && (
                     <Grid item container spacing={3}>
                       <Grid item sx={{ width: "100%" }}>

apps/link/app/_lib/authentication.ts

@@ -10,6 +10,7 @@ import {
 import Google from "next-auth/providers/google";
 import Credentials from "next-auth/providers/credentials";
 import Apple from "next-auth/providers/apple";
+import AzureADProvider from "next-auth/providers/azure-ad";
 
 const headers = { Authorization: `Token ${process.env.ZAMMAD_API_TOKEN}` };
 
@@ -82,6 +83,18 @@ if (process.env.GOOGLE_CLIENT_ID && process.env.GOOGLE_CLIENT_SECRET) {
       clientSecret: process.env.APPLE_CLIENT_SECRET,
     }),
   );
+} else if (
+  process.env.AZURE_AD_CLIENT_ID &&
+  process.env.AZURE_AD_CLIENT_SECRET &&
+  process.env.AZURE_AD_TENANT_ID
+) {
+  providers.push(
+    AzureADProvider({
+      clientId: process.env.AZURE_AD_CLIENT_ID,
+      clientSecret: process.env.AZURE_AD_CLIENT_SECRET,
+      tenantId: process.env.AZURE_AD_TENANT_ID,
+    }),
+  );
 } else {
   providers.push(
     Credentials({