I’m currently using Auth.js for authenticating my Next.js app to protect both the frontend and backend. For this, I am using Azure AAD as the provider. To successfully authenticate, we require three fields: tenant ID, client ID, and client secret.

However, I would like to eliminate the need for a client secret in my app. Removing the client secret would mean I can no longer use the library for handling authentication. Could you please suggest alternative ways to protect both my frontend and backend? Additionally, I still need to obtain user details such as name and email after authentication.