Adding ability to authenticate rest calls with bearer token

[sicurezza]

[sicurezza]

Hi, I edited files according to your questions.

regarding the resource id and client id they are different.

When an application requests azureAD a token to authenticate with a second application (in our case our application request a token to authenticate with wordpress) then it uses the resource id to identify the resource. This information is stored in AUD field of the token and the receiving application has to verify that the token it receives is for itself.

[bradkovach]

Is this so that AD bearer tokens can be used through the WP REST API?

[sicurezza]

yes