diff --git a/backend/_example/memory_store/go.sum b/backend/_example/memory_store/go.sum
index c2df98dc..9f426b0e 100644
--- a/backend/_example/memory_store/go.sum
+++ b/backend/_example/memory_store/go.sum
@@ -117,7 +117,7 @@ github.com/go-chi/render v1.0.1/go.mod h1:pq4Rr7HbnsdaeHagklXub+p6Wd16Af5l9koip1
 github.com/go-gl/glfw v0.0.0-20190409004039-e6da0acd62b1/go.mod h1:vR7hzQXu2zJy9AVAgeJqvqgH9Q5CA+iKCZ2gyEVpxRU=
 github.com/go-gl/glfw/v3.3/glfw v0.0.0-20191125211704-12ad95a8df72/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8=
 github.com/go-gl/glfw/v3.3/glfw v0.0.0-20200222043503-6f7a984d4dc4/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8=
-github.com/go-pkgz/auth v1.18.1-0.20220131194604-2eb160b3c90c/go.mod h1:QDsgzQg6aYlN9jxd8Hk8Q8nUjPR2L0hp0rcavlGMwrw=
+github.com/go-pkgz/auth v1.18.1-0.20220202181615-0642f8d25ee6/go.mod h1:QDsgzQg6aYlN9jxd8Hk8Q8nUjPR2L0hp0rcavlGMwrw=
 github.com/go-pkgz/expirable-cache v0.0.3 h1:rTh6qNPp78z0bQE6HDhXBHUwqnV9i09Vm6dksJLXQDc=
 github.com/go-pkgz/expirable-cache v0.0.3/go.mod h1:+IauqN00R2FqNRLCLA+X5YljQJrwB179PfiAoMPlTlQ=
 github.com/go-pkgz/jrpc v0.2.0 h1:CLy/eZyekjraVrxZV18N2R1mYLMJ/nWrgdfyIOGPY/E=
diff --git a/backend/go.mod b/backend/go.mod
index 50054e4b..97b177be 100644
--- a/backend/go.mod
+++ b/backend/go.mod
@@ -11,7 +11,7 @@ require (
 	github.com/go-chi/chi/v5 v5.0.7
 	github.com/go-chi/cors v1.2.0
 	github.com/go-chi/render v1.0.1
-	github.com/go-pkgz/auth v1.18.1-0.20220131194604-2eb160b3c90c
+	github.com/go-pkgz/auth v1.18.1-0.20220202181615-0642f8d25ee6
 	github.com/go-pkgz/jrpc v0.2.0
 	github.com/go-pkgz/lcw v0.8.1
 	github.com/go-pkgz/lgr v0.10.4
diff --git a/backend/go.sum b/backend/go.sum
index 14e868b6..5763222f 100644
--- a/backend/go.sum
+++ b/backend/go.sum
@@ -130,6 +130,8 @@ github.com/go-gl/glfw/v3.3/glfw v0.0.0-20191125211704-12ad95a8df72/go.mod h1:tQ2
 github.com/go-gl/glfw/v3.3/glfw v0.0.0-20200222043503-6f7a984d4dc4/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8=
 github.com/go-pkgz/auth v1.18.1-0.20220131194604-2eb160b3c90c h1:4e/dKZgMUwNBDAfLy749flKJO+RLBhten6uVwj40dyg=
 github.com/go-pkgz/auth v1.18.1-0.20220131194604-2eb160b3c90c/go.mod h1:QDsgzQg6aYlN9jxd8Hk8Q8nUjPR2L0hp0rcavlGMwrw=
+github.com/go-pkgz/auth v1.18.1-0.20220202181615-0642f8d25ee6 h1:5Iu5+fYbGgbT61SWBQPNiUvsv+eELILfIZtC2TC4y4A=
+github.com/go-pkgz/auth v1.18.1-0.20220202181615-0642f8d25ee6/go.mod h1:QDsgzQg6aYlN9jxd8Hk8Q8nUjPR2L0hp0rcavlGMwrw=
 github.com/go-pkgz/expirable-cache v0.0.3 h1:rTh6qNPp78z0bQE6HDhXBHUwqnV9i09Vm6dksJLXQDc=
 github.com/go-pkgz/expirable-cache v0.0.3/go.mod h1:+IauqN00R2FqNRLCLA+X5YljQJrwB179PfiAoMPlTlQ=
 github.com/go-pkgz/jrpc v0.2.0 h1:CLy/eZyekjraVrxZV18N2R1mYLMJ/nWrgdfyIOGPY/E=
diff --git a/backend/vendor/github.com/go-pkgz/auth/provider/providers.go b/backend/vendor/github.com/go-pkgz/auth/provider/providers.go
index f5b05c92..39711b28 100644
--- a/backend/vendor/github.com/go-pkgz/auth/provider/providers.go
+++ b/backend/vendor/github.com/go-pkgz/auth/provider/providers.go
@@ -5,6 +5,7 @@ import (
 	"crypto/sha1" //nolint
 	"encoding/json"
 	"fmt"
+
 	"github.com/dghubble/oauth1"
 	"github.com/dghubble/oauth1/twitter"
 	"github.com/go-pkgz/auth/token"
@@ -173,7 +174,7 @@ func NewBattlenet(p Params) Oauth2Handler {
 func NewMicrosoft(p Params) Oauth2Handler {
 	return initOauth2Handler(p, Oauth2Handler{
 		name:     "microsoft",
-		endpoint: microsoft.AzureADEndpoint("consumers"),
+		endpoint: microsoft.AzureADEndpoint("common"),
 		scopes:   []string{"User.Read"},
 		infoURL:  "https://graph.microsoft.com/v1.0/me",
 		// non-beta doesn't provide photo for consumers yet
diff --git a/backend/vendor/modules.txt b/backend/vendor/modules.txt
index 03816bb0..58e42726 100644
--- a/backend/vendor/modules.txt
+++ b/backend/vendor/modules.txt
@@ -74,7 +74,7 @@ github.com/go-chi/cors
 # github.com/go-chi/render v1.0.1
 ## explicit
 github.com/go-chi/render
-# github.com/go-pkgz/auth v1.18.1-0.20220131194604-2eb160b3c90c
+# github.com/go-pkgz/auth v1.18.1-0.20220202181615-0642f8d25ee6
 ## explicit
 github.com/go-pkgz/auth
 github.com/go-pkgz/auth/avatar