app.py

@app.route("/getAToken")
def main_logic():
    code = flask.request.args["code"]
    state = flask.request.args["state"]
    if state != flask.session["state"]:
        raise ValueError("State does not match")
    auth_context = adal.AuthenticationContext(AUTHORITY_URL)
    token_response = auth_context.acquire_token_with_authorization_code(
        code, REDIRECT_URI, config.RESOURCE, config.CLIENT_ID, config.CLIENT_SECRET
    )
    # It is recommended to save this to a database when using a production app.
    flask.session["access_token"] = token_response["accessToken"]

    return flask.redirect("/privateurl")