this post was submitted on 27 Oct 2026
1501 points (98.6% liked)

Programmer Humor

33844 readers
1147 users here now

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

founded 3 years ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[–] trxxruraxvr@lemmy.world 6 points 1 day ago

This works because loggin in to outlook sets a cookie for login.microsoftonline.com which is reused by other Microsoft products. Each product requests a token from login.microsoftonline.com and as long as you have a valid cookie for that domain it will return a token that the app (outlook/teams/onedrive/etc) can use to access its own api.

The cookie itself stays bound to login.microsoftonline.com and it's never shared with other domains and the service at login.microsoftonline.com will not provide tokens to requests from non-microsoft domains.