POST /{tenant}/oauth2/v2.0/token using the bridge tenant id, client id, and client secret.
Expose Microsoft-style token and `sendMail` endpoints from your own application.
This service validates one bridge tenant id, client id, and client secret from your application configuration,
issues access tokens from /{tenant}/oauth2/v2.0/token, accepts bearer-authenticated
/v1.0/users/{email}/sendMail requests, forwards them to Microsoft Graph, and keeps an audit log.
Admin access is available at /admin/login.
Public API docs and tester are available at /docs.
POST /v1.0/users/{email}/sendMail with a bearer token and Graph-style JSON payload, but only verified sender emails are allowed.