Azure AD credentials exposed publicly

Azure AD credentials, including ClientId and ClientSecret, were exposed in a publicly accessible appsettings.json file, creating a significant security risk. This vulnerability allows attackers to authenticate directly to Microsoft's OAuth 2.0 endpoints, potentially impersonating the application and accessing sensitive Microsoft 365 resources. The exposure is attributed to common cloud misconfigurations, highlighting the need for proper secrets management and secure deployment practices.