Adding Commnet

Author: dstrockis

TodoListService/App_Start/Startup.Auth.cs

@@ -24,6 +24,11 @@ public void ConfigureAuth(IAppBuilder app)
                 ValidateIssuer = false,
             };
 
+            // NOTE: The usual WindowsAzureActiveDirectoryBearerAuthenticaitonMiddleware uses a
+            // metadata endpoint which is not supported by the v2.0 endpoint.  Instead, this 
+            // OpenIdConenctCachingSecurityTokenProvider can be used to fetch & use the OpenIdConnect
+            // metadata document.
+
             app.UseOAuthBearerAuthentication(new OAuthBearerAuthenticationOptions
             {
                 AccessTokenFormat = new Microsoft.Owin.Security.Jwt.JwtFormat(tvps, new OpenIdConnectCachingSecurityTokenProvider("https://login.microsoftonline.com/common/v2.0/.well-known/openid-configuration")),